linux/net at 58652e2422a7407e77ee50fcaaf4bf1885de8753 - linux - Gitea: Git with a cup of tea

mirror/linux

Files

History

Eric Dumazet 2d5ff7e339 ipv6: prevent possible UAF in ip6_xmit()

If skb_expand_head() returns NULL, skb has been freed
and the associated dst/idev could also have been freed.

We must use rcu_read_lock() to prevent a possible UAF.

Fixes: 0c9f227bee ("ipv6: use skb_expand_head in ip6_xmit")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Vasily Averin <vasily.averin@linux.dev>
Reviewed-by: David Ahern <dsahern@kernel.org>
Link: https://patch.msgid.link/20240820160859.3786976-4-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2024-08-21 17:35:49 -07:00

..

net: fill in MODULE_DESCRIPTION()s for 6LoWPAN

2024-02-09 14:12:01 -08:00

Merge tag '9p-for-6.10-rc2' of https://github.com/martinetd/linux

2024-05-29 09:25:15 -07:00

…

net: Add struct kernel_ethtool_ts_info

2024-07-15 08:02:26 -07:00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-09 10:01:01 -07:00

atm: clean up a put_user() calls

2024-06-14 19:08:50 -07:00

ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()

2024-06-01 15:49:42 -07:00

Revert "batman-adv: prefer kfree_rcu() over call_rcu() with free-only callbacks"

2024-06-12 20:18:00 +02:00

Bluetooth: MGMT: Add error handling to pair_device()

2024-08-15 13:09:35 -04:00

Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2024-07-09 17:01:46 +02:00

netfilter: nf_queue: drop packets with cloned unconfirmed conntracks

2024-08-14 23:37:23 +02:00

net: caif: remove unused structs

2024-06-05 10:18:06 +01:00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-06-27 12:14:11 -07:00

libceph: fix crush_choose_firstn() kernel-doc warnings

2024-07-11 16:33:07 +02:00

netpoll: do not export netpoll_poll_[disable|enable]()

2024-08-21 17:31:28 -07:00

…

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-06-27 12:14:11 -07:00

devlink: Constify the 'table_ops' parameter of devl_dpipe_table_register()

2024-06-05 10:24:57 +01:00

…

net: dsa: provide a software untagging function on RX for VLAN-aware bridges

2024-08-16 09:59:32 +01:00

netkit: Fix pkt_type override upon netkit pass verdict

2024-05-25 10:48:57 -07:00

net: ethtool: Allow write mechanism of LPL and both LPL and EPL

2024-08-15 12:20:14 +02:00

net/handshake: remove redundant assignment to variable ret

2024-04-16 17:14:55 -07:00

net: hsr: cosmetic: Remove extra white space

2024-06-19 17:32:57 -07:00

Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2024-05-28 07:27:29 -07:00

…

udp: fix receiving fraglist GSO packets

2024-08-21 17:15:05 -07:00

ipv6: prevent possible UAF in ip6_xmit()

2024-08-21 17:35:49 -07:00

net/iucv: fix use after free in iucv_sock_close()

2024-07-30 15:01:50 +02:00

kcm: Serialise kcm_sendmsg() for the same socket.

2024-08-19 18:36:12 -07:00

net: fill in MODULE_DESCRIPTION()s for af_key

2024-02-09 14:12:01 -08:00

l2tp: fix lockdep splat

2024-08-08 08:28:24 -07:00

…

…

llc: Constify struct llc_sap_state_trans

2024-07-15 08:51:19 -07:00

wifi: mac80211: use monitor sdata with driver only if desired

2024-07-26 12:30:49 +02:00

net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()

2024-06-03 11:20:56 +02:00

net: mctp: test: Use correct skb for route input check

2024-08-19 17:48:00 -07:00

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

mptcp: pm: avoid possible UaF when selecting endp

2024-08-20 17:40:13 -07:00

net/ncsi: Fix the multi thread manner of NCSI driver

2024-06-01 16:21:44 -07:00

netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests

2024-08-14 23:44:55 +02:00

netlabel: fix RCU annotation for IPv4 options on socket creation

2024-05-13 14:58:12 -07:00

net: netlink: remove the cb_mutex "injection" from netlink core

2024-06-10 13:15:40 +01:00

netrom: Fix a memory leak in nr_heartbeat_expiry()

2024-06-17 13:06:23 +01:00

Merge tag 'net-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-23 12:49:37 -07:00

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

2024-04-26 12:20:01 +02:00

net: openvswitch: store sampling probability in cb.

2024-07-05 17:45:47 -07:00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-07-15 13:19:17 -07:00

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

net: psample: fix flag being set in wrong skb

2024-07-11 18:11:31 -07:00

net: qrtr: ns: Ignore ENODEV failures in ns

2024-06-14 13:17:21 +02:00

sysctl: treewide: constify the ctl_table argument of proc_handlers

2024-07-24 20:59:29 +02:00

net: rfkill: Correct return value in invalid parameter case

2024-06-26 10:49:01 +02:00

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-09 10:01:01 -07:00

netem: fix return value if duplicate enqueue fails

2024-08-20 17:03:34 -07:00

sctp: Fix null-ptr-deref in reuseport_add_sock().

2024-08-02 16:25:06 -07:00

net/smc: add the max value of fallback reason count

2024-08-07 19:36:23 -07:00

…

Merge tag 'nfsd-6.11-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux

2024-08-10 10:44:21 -07:00

net: bridge: switchdev: Improve error message for port_obj_add/del functions

2024-05-08 12:19:12 +01:00

Merge tag 'net-6.11-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-07-25 13:32:25 -07:00

net: tls: Pass union tls_crypto_context pointer to memzero_explicit

2024-07-09 11:14:47 -07:00

af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash

2024-07-17 22:49:00 +02:00

vsock: fix recursive ->recvmsg calls

2024-08-15 12:07:04 +02:00

wifi: cfg80211: correct S1G beacon length calculation

2024-07-26 12:32:47 +02:00

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len

2024-07-25 11:57:27 +02:00

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-07-15 13:19:17 -07:00

compat.c

…

devres.c

…

Kconfig

ethtool: provide customized dim profile management

2024-06-25 17:15:06 -07:00

Kconfig.debug

…

Makefile

af_unix: Remove CONFIG_UNIX_SCM.

2024-01-31 16:41:16 -08:00

socket.c

net: Split a __sys_listen helper for io_uring

2024-06-19 07:57:21 -06:00

sysctl_net.c

sysctl: Remove check for sentinel element in ctl_table arrays

2024-06-13 10:50:52 +02:00