iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Liping Zhang 0708a47681 netfilter: nfnetlink_queue: fix secctx memory leak 
[ Upstream commit 77c1c03c5b8ef28e55bb0aff29b1e006037ca645 ]

We must call security_release_secctx to free the memory returned by
security_secid_to_secctx, otherwise memory may be leaked forever.

Fixes: ef493bd930ae ("netfilter: nfnetlink_queue: add security context information")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2017-12-25 14:23:43 +01:00
..
6lowpan
6lowpan: ndisc: no overreact if no short address is available
2016-09-19 20:19:34 +02:00
9p
net/9p: Switch to wait_event_killable()
2017-11-30 08:39:09 +00:00
802
…
8021q
vlan: fix a use-after-free in vlan_device_event()
2017-11-24 08:33:41 +01:00
appletalk
appletalk: use IS_ENABLED() instead of checking for built-in or module
2016-09-10 21:19:10 -07:00
atm
lec: use IS_ENABLED() instead of checking for built-in or module
2016-09-10 21:19:10 -07:00
ax25
ax25: Fix segfault after sock connection timeout
2017-02-04 09:47:09 +01:00
batman-adv
batman-adv: Check for alloc errors when preparing TT local data
2016-12-02 10:46:59 +01:00
bluetooth
Bluetooth: Properly check L2CAP config option output buffer length
2017-09-13 14:13:36 -07:00
bridge
netfilter: bridge: honor frag_max_size when refragmenting
2017-12-20 10:07:20 +01:00
caif
net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
2017-07-05 14:40:14 +02:00
can
can: Fix kernel panic at security_sock_rcv_skb
2017-02-18 15:11:40 +01:00
ceph
libceph: don't WARN() if user tries to add invalid key
2017-11-30 08:39:03 +00:00
core
net: Do not allow negative values for busy_read and busy_poll sysctl interfaces
2017-12-25 14:23:41 +01:00
dcb
net: dcb: set error code on failures
2016-12-03 23:54:25 -05:00
dccp
tcp/dccp: block bh before arming time_wait timer
2017-12-16 16:25:46 +01:00
decnet
decnet: always not take dst->__refcnt when inserting dst into hash table
2017-07-05 14:40:16 +02:00
dns_resolver
KEYS: Fix race between updating and finding a negative key
2017-10-27 10:38:11 +02:00
dsa
net: dsa: select NET_SWITCHDEV
2017-11-15 15:53:17 +01:00
ethernet
net: introduce device min_header_len
2017-02-18 15:11:43 +01:00
hsr
net/hsr: Remove unused but set variable
2016-10-18 10:28:18 -04:00
ieee802154
Revert "net: fix percpu memory leaks"
2017-09-20 08:19:55 +02:00
ipv4
net: ipconfig: fix ic_close_devs() use-after-free
2017-12-25 14:23:42 +01:00
ipv6
sit: update frag_off info
2017-12-16 16:25:45 +01:00
ipx
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda
irda: do not leak initialized list.dev to userspace
2017-08-30 10:21:42 +02:00
iucv
net/af_iucv: don't use paged skbs for TX on HiperSockets
2017-01-19 20:18:04 +01:00
kcm
fix kcm_clone()
2017-12-16 16:25:47 +01:00
key
af_key: do not use GFP_KERNEL in atomic contexts
2017-08-30 10:21:38 +02:00
l2tp
l2tp: cleanup l2tp_tunnel_delete calls
2017-12-20 10:07:31 +01:00
l3mdev
net: ipv6: Remove l3mdev_get_saddr6
2016-09-10 23:12:53 -07:00
lapb
net/lapb: tuse %*ph to dump buffers
2016-05-29 22:33:25 -07:00
llc
net/llc: avoid BUG_ON() in skb_orphan()
2017-02-26 11:10:50 +01:00
mac80211
mac80211: Fix addition of mesh configuration element
2017-12-20 10:07:17 +01:00
mac802154
mac802154: use rate limited warnings for malformed frames
2016-09-19 20:19:34 +02:00
mpls
net: mpls: Fix nexthop alive tracking on down events
2017-12-20 10:07:25 +01:00
ncsi
net/ncsi: Improve HNCDSC AEN handler
2016-10-20 11:23:08 -04:00
netfilter
netfilter: nfnetlink_queue: fix secctx memory leak
2017-12-25 14:23:43 +01:00
netlabel
netlabel: Implement CALIPSO config functions for SMACK.
2016-06-27 15:06:18 -04:00
netlink
crypto: deadlock between crypto_alg_sem/rtnl_mutex/genl_mutex
2017-12-25 14:23:37 +01:00
netrom
…
nfc
NFC: fix device-allocation error return
2017-11-30 08:39:07 +00:00
openvswitch
openvswitch: fix skb_panic due to the incorrect actions attrlen
2017-08-30 10:21:40 +02:00
packet
net/packet: fix a race in packet_bind() and packet_notifier()
2017-12-16 16:25:45 +01:00
phonet
…
qrtr
net: qrtr: Mark 'buf' as little endian
2017-12-09 22:01:51 +01:00
rds
rds: Fix NULL pointer dereference in __rds_rdma_map
2017-12-16 16:25:45 +01:00
rfkill
…
rose
rose: limit sk_filter trim to payload
2016-07-13 11:53:40 -07:00
rxrpc
rxrpc: Ignore BUSY packets on old calls
2017-12-20 10:07:25 +01:00
sched
sch_dsmark: fix invalid skb_cow() usage
2017-12-25 14:23:38 +01:00
sctp
sctp: out_qlen should be updated when pruning unsent queue
2017-12-25 14:23:38 +01:00
strparser
strparser: destroy workqueue on module exit
2017-03-22 12:43:33 +01:00
sunrpc
sunrpc: Fix rpc_task_begin trace point
2017-12-14 09:28:23 +01:00
switchdev
switchdev: Execute bridge ndos only for bridge ports
2016-10-19 10:58:04 -04:00
tipc
tipc: fix nametbl deadlock at tipc_nametbl_unsubscribe
2017-12-25 14:23:39 +01:00
unix
net/unix: don't show information about sockets from other namespaces
2017-11-18 11:22:22 +01:00
vmw_vsock
vsock: cancel packets when failing to connect
2017-12-25 14:23:38 +01:00
wimax
…
wireless
cfg80211: fix connect/disconnect edge cases
2017-11-02 09:49:15 +01:00
x25
net: x25: remove null checks on arrays calling_ae and called_ae
2016-09-09 18:13:30 -07:00
xfrm
xfrm: Copy policy family in clone_policy
2017-12-14 09:28:24 +01:00
compat.c
audit: log 32-bit socketcalls
2017-10-08 10:26:06 +02:00
Kconfig
strparser: Stream parser for messages
2016-08-17 19:36:23 -04:00
Makefile
strparser: Stream parser for messages
2016-08-17 19:36:23 -04:00
socket.c
net: initialize msg.msg_flags in recvfrom
2017-12-20 10:07:18 +01:00
sysctl_net.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2016-10-06 09:52:23 -07:00