mirror/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
b069e14fff46c8da9fcc79957f8acaa3e2dfdb6b
linux/net
History
Tetsuo Handa 3a58f13a88 net: rds: acquire refcount on TCP sockets 
syzbot is reporting use-after-free read in tcp_retransmit_timer() [1],
for TCP socket used by RDS is accessing sock_net() without acquiring a
refcount on net namespace. Since TCP's retransmission can happen after
a process which created net namespace terminated, we need to explicitly
acquire a refcount.

Link: https://syzkaller.appspot.com/bug?extid=694120e1002c117747ed [1]
Reported-by: syzbot <syzbot+694120e1002c117747ed@syzkaller.appspotmail.com>
Fixes: 26abe14379 ("net: Modify sk_alloc to not reference count the netns of kernel sockets.")
Fixes: 8a68173691 ("net: sk_clone_lock() should only do get_net() if the parent is not a kernel socket")
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Tested-by: syzbot <syzbot+694120e1002c117747ed@syzkaller.appspotmail.com>
Link: https://lore.kernel.org/r/a5fb1fc4-2284-3359-f6a0-e4e390239d7b@I-love.SAKURA.ne.jp
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2022-05-03 13:22:50 +02:00
..
6lowpan
net: don't include ndisc.h from ipv6.h
2022-02-04 14:15:11 -08:00
9p
xen/grant-table: remove readonly parameter from functions
2022-03-15 20:34:40 -05:00
802
net: 802: Use memset_startat() to clear struct fields
2021-11-19 11:23:23 +00:00
8021q
vlan: use correct format characters
2022-03-17 16:34:49 -07:00
appletalk
…
atm
proc: remove PDE_DATA() completely
2022-01-22 08:33:37 +02:00
ax25
ax25: Fix UAF bugs in ax25 timers
2022-03-29 10:24:34 +02:00
batman-adv
batman-adv: Use netif_rx().
2022-03-07 11:40:41 +00:00
bluetooth
Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted
2022-04-26 20:10:51 +02:00
bpf
bpf: Fix release of page_pool in BPF_PROG_RUN in test runner
2022-04-11 17:30:15 +02:00
bpfilter
uaccess: remove CONFIG_SET_FS
2022-02-25 09:36:06 +01:00
bridge
net: bridge: switchdev: check br_vlan_group() return value
2022-04-22 15:12:18 -07:00
caif
net: caif: Use netif_rx().
2022-03-04 12:02:19 +00:00
can
can: isotp: remove re-binding of bound socket
2022-04-29 11:02:47 +02:00
ceph
libceph: drop else branches in prepare_read_data{,_cont}
2022-03-01 18:26:36 +01:00
core
Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf
2022-04-27 15:18:40 -07:00
dcb
net: dcb: disable softirqs in dcbnl_flush_dev()
2022-03-03 08:01:55 -08:00
dccp
dccp: remove max48()
2022-01-27 13:53:27 +00:00
decnet
net: decnet: use time_is_before_jiffies() instead of open coding it
2022-02-28 13:21:32 +00:00
dns_resolver
…
dsa
net: dsa: flood multicast to CPU when slave has IFF_PROMISC
2022-04-25 11:46:24 +01:00
ethernet
gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
2021-11-24 17:21:42 -08:00
ethtool
ethtool: add support to set/get completion queue event size
2022-02-23 20:33:05 -08:00
hsr
net: add per-cpu storage and net->core_stats
2022-03-11 23:17:24 -08:00
ieee802154
net: ipv6: Handle delivery_time in ipv6 defrag
2022-03-03 14:38:48 +00:00
ife
…
ipv4
net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
2022-04-30 15:18:19 +01:00
ipv6
mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()
2022-04-30 15:19:08 +01:00
iucv
s390/iucv: sort out physical vs virtual pointers usage
2022-02-22 16:09:13 -08:00
kcm
net: Don't include filter.h from net/sock.h
2021-12-29 08:48:14 -08:00
key
af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
2022-03-10 07:39:47 +01:00
l2tp
l2tp: add netns refcount tracker to l2tp_dfs_seq_data
2021-12-10 06:38:27 -08:00
l3mdev
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-15 14:27:24 -07:00
lapb
…
llc
llc: only change llc->dev when bind() succeeds
2022-03-25 16:55:41 -07:00
mac80211
mac80211: fix ht_capa printout in debugfs
2022-04-11 11:57:27 +02:00
mac802154
mac802154: use dev_addr_set() - manual
2021-10-20 14:27:40 +01:00
mctp
mctp: defer the kfree of object mdev->addrs
2022-04-26 09:14:47 +02:00
mpls
net: mpls: Fix GCC 12 warning
2022-02-10 15:29:39 +00:00
mptcp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-03-23 10:53:49 -07:00
ncsi
all: replace find_next{,_zero}_bit with find_first{,_zero}_bit where appropriate
2022-01-15 08:47:31 -08:00
netfilter
netfilter: nft_socket: only do sk lookups when indev is available
2022-04-28 16:15:23 +02:00
netlabel
netlabel: fix out-of-bounds memory accesses
2022-03-21 10:59:11 +00:00
netlink
netlink: reset network and mac headers in netlink_dump()
2022-04-19 15:05:03 +02:00
netrom
netrom: fix api breakage in nr_setsockopt()
2022-01-07 14:11:05 +00:00
nfc
nfc: replace improper check device_is_registered() in netlink related functions
2022-05-01 13:26:05 +01:00
nsh
…
openvswitch
openvswitch: fix OOB access in reserve_sfa_size()
2022-04-15 11:50:02 +01:00
packet
net/packet: fix packet_sock xmit return value checking
2022-04-15 11:17:30 +01:00
phonet
phonet: Use netif_rx().
2022-03-07 11:40:41 +00:00
psample
…
qrtr
bus: mhi: core: Add an API for auto queueing buffers for DL channel
2021-12-17 17:17:14 +01:00
rds
net: rds: acquire refcount on TCP sockets
2022-05-03 13:22:50 +02:00
rfkill
rfkill: make new event layout opt-in
2022-03-18 13:09:17 +02:00
rose
net: Don't include filter.h from net/sock.h
2021-12-29 08:48:14 -08:00
rxrpc
rxrpc: Enable IPv6 checksums on transport socket
2022-04-30 13:59:34 +01:00
sched
net/sched: cls_u32: fix possible leak in u32_init_knode()
2022-04-15 14:26:11 -07:00
sctp
sctp: check asoc strreset_chunk in sctp_generate_reconf_event
2022-04-23 22:34:17 +01:00
smc
net/smc: Fix slab-out-of-bounds issue in fallback
2022-04-25 11:03:48 -07:00
strparser
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-09 01:05:28 +01:00
sunrpc
Merge tag 'nfsd-5.18-1' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux
2022-04-12 14:23:19 -10:00
switchdev
net: switchdev: remove lag_mod_cb from switchdev_handle_fdb_event_to_device
2022-02-24 21:31:43 -08:00
tipc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-03-23 10:53:49 -07:00
tls
tls: Skip tls_append_frag on zero copy size
2022-04-27 15:25:20 -07:00
unix
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-03-23 10:53:49 -07:00
vmw_vsock
vsock/virtio: enable VQs early on probe
2022-03-24 18:36:36 -07:00
wireless
cfg80211: hold bss_lock while updating nontrans_list
2022-04-11 11:55:36 +02:00
x25
net/x25: Fix null-ptr-deref caused by x25_disconnect
2022-03-26 11:48:16 -07:00
xdp
xsk: Fix possible crash when multiple sockets are created
2022-04-26 16:19:54 +02:00
xfrm
xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
2022-04-04 13:32:56 +02:00
compat.c
…
devres.c
…
Kconfig
page_pool: Add allocation stats
2022-03-03 09:55:28 +00:00
Kconfig.debug
net: add networking namespace refcount tracker
2021-12-10 06:38:26 -08:00
Makefile
…
socket.c
fs: allocate inode by using alloc_inode_sb()
2022-03-22 15:57:03 -07:00
sysctl_net.c
sections: move and rename core_kernel_data() to is_kernel_core_data()
2021-11-09 10:02:50 -08:00