Fixed
Created: Jun 19, 2023
Updated: Mar 27, 2024
Resolved Date: Mar 27, 2024
Found In Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel
Build LTP into the image run icmp_rate_limit01 via runltp -f syscalls -s chdir01
setup.sh --machines nxp-imx6 --templates feature/docker feature/kdump feature/kexec --distro wrlinux --dl-layers=1 --accept-eula=yes
echo 'PREFERRED_PROVIDER_virtual/kernel = "linux-yocto-rt"' >> conf/local.conf
echo 'IMAGE_INSTALL:append = " ltp"' >> conf/local.conf
bitbake wrlinux-image-std
tag=cve-2020-25705 stime=1677838887
cmdline="icmp_rate_limit01"
contacts=""
analysis=exit
<<<test_output>>>
tst_kconfig.c:87: [1;34mTINFO: [0mParsing kernel config '/proc/config.gz'
tst_test.c:1558: [1;34mTINFO: [0mTimeout per run is 0h 00m 30s
IPv6: ADDRCONF(NETDEV_CHANGE): ltp_veth1: link becomes ready
IPv6: ADDRCONF(NETDEV_CHANGE): ltp_veth2: link becomes ready
icmp_rate_limit01.c:222: [1;34mTINFO: [0mBatch 0: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 1: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 2: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 3: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 4: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 5: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 6: Got 100 ICMP errors
icmp_rate_limit01.c:226: [1;34mTINFO: [0mBatch 7: Got 100 ICMP errors
icmp_rate_limit01.c:230: [1;31mTFAIL: [0mICMP rate limit not randomized, system is vulnerable
[1;33mHINT: [0mYou _MAY_ be missing kernel fixes:
https://git.kernel.org/puLTP: starting cve-2020-29373 (io_uring02)
b/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b38e7819cae9
[1;33mHINT: [0mYou _MAY_ be vulnerable to CVE(s):
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25705
Summary:
passed 0
failed 1
broken 0
skipped 0
warnings 0
<<<execution_status>>>
/lpg-build/cdc/fast_prod/WRL10_23/WRL10_23_GIT/wrlinux-10/setup.sh --machines nxp-imx6 --templates feature/docker feature/kdump feature/kexec --distro wrlinux --dl-layers=1 --accept-eula=yes
source environment-setup-x86_64-wrlinuxsdk-linux
source oe-init-build-env build
echo 'PREFERRED_PROVIDER_virtual/kernel = "linux-yocto-rt"' >> conf/local.conf
bitbake-layers add-layer /lpg-build/cdc/WASSP_LINUX_1023/testcases/wrlinux/wr-testing/bts-dev
echo 'require templates/feature/bts/template.conf' >> conf/local.conf
bitbake wrlinux-image-std
share image:
http://pek-lpgtest7408.wrs.com/buildarea1/SharedImage/LTS23/LTP/nxp-imx6_preempt-rt_glibc-std/20230530_135844/
./runltp -f syscalls -s chdir01