mirror/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Files
f504465970aebb2467da548f7c1efbbf36d0f44b
linux/net
History
Dmitry Antipov f504465970 net: sched: fix use-after-free in taprio_change() 
In 'taprio_change()', 'admin' pointer may become dangling due to sched
switch / removal caused by 'advance_sched()', and critical section
protected by 'q->current_entry_lock' is too small to prevent from such
a scenario (which causes use-after-free detected by KASAN). Fix this
by prefer 'rcu_replace_pointer()' over 'rcu_assign_pointer()' to update
'admin' immediately before an attempt to schedule freeing.

Fixes: a3d43c0d56 ("taprio: Add support adding an admin schedule")
Reported-by: syzbot+b65e0af58423fc8a73aa@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=b65e0af58423fc8a73aa
Acked-by: Vinicius Costa Gomes <vinicius.gomes@intel.com>
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Link: https://patch.msgid.link/20241018051339.418890-1-dmantipov@yandex.ru
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2024-10-23 13:26:15 +02:00
..
6lowpan
ipv6: eliminate ndisc_ops_is_useropt()
2024-08-12 17:23:57 -07:00
9p
net/9p/usbg: Fix build error
2024-10-09 09:56:40 +02:00
802
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
8021q
netdev_features: remove NETIF_F_ALL_FCOE
2024-09-03 11:36:43 +02:00
appletalk
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-05-09 10:01:01 -07:00
atm
atm: clean up a put_user() calls
2024-06-14 19:08:50 -07:00
ax25
ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
2024-06-01 15:49:42 -07:00
batman-adv
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
bluetooth
Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
2024-10-04 16:54:17 -04:00
bpf
bpf: use type_may_be_null() helper for nullable-param check
2024-09-05 13:29:06 -07:00
bridge
bridge: Handle error of rtnl_register_module().
2024-10-10 15:39:35 +02:00
caif
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
can
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-09-15 09:13:19 -07:00
ceph
libceph: use min() to simplify code in ceph_dns_resolve_name()
2024-08-27 09:30:16 +02:00
core
rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
2024-10-10 15:39:35 +02:00
dcb
…
dccp
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
devlink
devlink: Constify the 'table_ops' parameter of devl_dpipe_table_register()
2024-06-05 10:24:57 +01:00
dns_resolver
…
dsa
net: dsa: refuse cross-chip mirroring operations
2024-10-09 19:41:35 -07:00
ethernet
netkit: Fix pkt_type override upon netkit pass verdict
2024-05-25 10:48:57 -07:00
ethtool
net: ethtool: phy: Don't set the context dev pointer for unfiltered DUMP
2024-09-13 21:40:12 -07:00
handshake
net/handshake: use sockfd_put() helper
2024-08-27 16:09:25 -07:00
hsr
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-09-12 17:11:24 -07:00
ieee802154
netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local
2024-09-03 11:36:43 +02:00
ife
…
ipv4
udp: Compute L4 checksum as usual when not segmenting the skb
2024-10-15 18:12:33 -07:00
ipv6
udp: Compute L4 checksum as usual when not segmenting the skb
2024-10-15 18:12:33 -07:00
iucv
s390/iucv: Fix vargs handling in iucv_alloc_device()
2024-08-22 13:09:20 -07:00
kcm
kcm: Serialise kcm_sendmsg() for the same socket.
2024-08-19 18:36:12 -07:00
key
…
l2tp
genetlink: hold RCU in genlmsg_mcast()
2024-10-15 17:52:58 -07:00
l3mdev
…
lapb
…
llc
llc: Constify struct llc_sap_state_trans
2024-07-15 08:51:19 -07:00
mac80211
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
mac802154
Merge tag 'net-6.12-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-10-03 09:44:00 -07:00
mctp
mctp: Handle error of rtnl_register_module().
2024-10-10 15:39:35 +02:00
mpls
mpls: Handle error of rtnl_register_module().
2024-10-10 15:39:35 +02:00
mptcp
mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
2024-10-17 12:06:55 +02:00
ncsi
net/ncsi: Disable the ncsi work before freeing the associated structure
2024-10-03 10:14:14 +02:00
netfilter
netfilter: xtables: fix typo causing some targets not to load on IPv6
2024-10-21 11:31:26 +02:00
netlabel
netlabel: fix RCU annotation for IPv4 options on socket creation
2024-05-13 14:58:12 -07:00
netlink
genetlink: hold RCU in genlmsg_mcast()
2024-10-15 17:52:58 -07:00
netrom
net/netrom: prefer strscpy over strcpy
2024-08-29 12:33:07 -07:00
nfc
Merge tag 'net-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-05-23 12:49:37 -07:00
nsh
nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
2024-04-26 12:20:01 +02:00
openvswitch
netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local
2024-09-03 11:36:43 +02:00
packet
net: add support for skbs with unreadable frags
2024-09-11 20:44:31 -07:00
phonet
phonet: Handle error of rtnl_register_module().
2024-10-10 15:39:36 +02:00
psample
net: psample: fix flag being set in wrong skb
2024-07-11 18:11:31 -07:00
qrtr
net: qrtr: Update packets cloning when broadcasting
2024-09-24 10:48:16 +02:00
rds
net: rds: add option for GCOV profiling
2024-08-09 13:18:46 +01:00
rfkill
[tree-wide] finally take no_llseek out
2024-09-27 08:18:43 -07:00
rose
net: change proto and proto_ops accept type
2024-05-13 18:19:09 -06:00
rxrpc
rxrpc: Fix uninitialised variable in rxrpc_send_data()
2024-10-03 16:23:21 -07:00
sched
net: sched: fix use-after-free in taprio_change()
2024-10-23 13:26:15 +02:00
sctp
sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
2024-10-09 13:36:32 +01:00
smc
net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
2024-10-15 10:56:31 -07:00
strparser
…
sunrpc
Merge tag 'nfs-for-6.12-2' of git://git.linux-nfs.org/projects/anna/linux-nfs
2024-10-11 15:37:15 -07:00
switchdev
net: bridge: switchdev: Improve error message for port_obj_add/del functions
2024-05-08 12:19:12 +01:00
tipc
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2024-09-15 09:13:19 -07:00
tls
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
unix
af_unix: Don't return OOB skb in manage_oob().
2024-09-09 17:14:27 -07:00
vmw_vsock
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2024-10-07 11:33:26 -07:00
wireless
genetlink: hold RCU in genlmsg_mcast()
2024-10-15 17:52:58 -07:00
x25
net: change proto and proto_ops accept type
2024-05-13 18:19:09 -06:00
xdp
Merge tag 'bpf-next-6.12' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
2024-09-21 09:27:50 -07:00
xfrm
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
compat.c
…
devres.c
…
Kconfig
memory-provider: disable building dmabuf mp on !CONFIG_PAGE_POOL
2024-09-13 11:41:45 -07:00
Kconfig.debug
…
Makefile
…
socket.c
net: explicitly clear the sk pointer, when pf->create fails
2024-10-07 16:21:59 -07:00
sysctl_net.c
sysctl: Remove check for sentinel element in ctl_table arrays
2024-06-13 10:50:52 +02:00