Kernel crash: oops in check_peer_redir

  • 7011451
  • 04-Dec-2012
  • 02-Jan-2013

Environment

Open Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP2
vmlinux-3.0.38-0.5-default

Situation

Kernel oops exception RIP: check_peer_redir+62
BUG: unable to handle kernel NULL pointer dereference at 000000000000002c
IP: [<ffffffff813b1bce>] check_peer_redir+0x3e/0x120

Resolution

Fix released in update channel.  kernel-default-3.0.51-0.7.9.1


Cause

Data structure was not being properly protected. 

Additional Information

Stack Trace:
PID: 0 TASK: ffff8804077cc640 CPU: 13 COMMAND: "kworker/0:1" #0 [ffff88081fcc3970] machine_kexec at ffffffff8102672e #1 [ffff88081fcc39c0] crash_kexec at ffffffff810a353a #2 [ffff88081fcc3a90] oops_end at ffffffff81442cb8 #3 [ffff88081fcc3ab0] __bad_area_nosemaphore at ffffffff810324d5 #4 [ffff88081fcc3b70] do_page_fault at ffffffff8144520e #5 [ffff88081fcc3c70] page_fault at ffffffff81441e65 [exception RIP: check_peer_redir+62] RIP: ffffffff813b1bce RSP: ffff88081fcc3d20 RFLAGS: 00010246 RAX: 00000000a00a030a RBX: ffff88044cfbce80 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff8807e8f70d40 RDI: 0000000000000000 RBP: ffff8807e8f70d40 R8: 0000000000004168 R9: 000000000000527b R10: 0000000000000014 R11: ffffffff810499e0 R12: 00000000a00a030a R13: 0000000000000000 R14: ffff88042f4fe4e0 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #6 [ffff88081fcc3d38] ipv4_dst_check at ffffffff813b37e0 #7 [ffff88081fcc3d58] __sk_dst_check at ffffffff8137602a #8 [ffff88081fcc3d78] ip_queue_xmit at ffffffff813bd35a #9 [ffff88081fcc3db8] tcp_transmit_skb at ffffffff813d32f0 #10 [ffff88081fcc3e28] tcp_keepalive_timer at ffffffff813d6f30 #11 [ffff88081fcc3e48] call_timer_fn at ffffffff8106803b #12 [ffff88081fcc3e78] run_timer_softirq at ffffffff81069443 #13 [ffff88081fcc3ee8] __do_softirq at ffffffff8106038f #14 [ffff88081fcc3f48] call_softirq at ffffffff8144a6bc #15 [ffff88081fcc3f60] do_softirq at ffffffff810043a5 #16 [ffff88081fcc3f90] smp_apic_timer_interrupt at ffffffff81020db8 #17 [ffff88081fcc3fb0] apic_timer_interrupt at ffffffff81449e73