Francesco Ruggeri 07a5d38453 net: possible use after free in dst_release ...

dst_release should not access dst->flags after decrementing
__refcnt to 0. The dst_entry may be in dst_busy_list and
dst_gc_task may dst_destroy it before dst_release gets a chance
to access dst->flags.

Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
Acked-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2016-01-06 15:00:27 -05:00

..

datagram.c

net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA

2015-12-01 15:45:05 -05:00

dev_addr_lists.c

…

dev_ioctl.c

…

dev.c

net/core: revert "net: fix __netdev_update_features return.." and add comment

2015-11-17 15:25:45 -05:00

drop_monitor.c

…

dst.c

net: possible use after free in dst_release

2016-01-06 15:00:27 -05:00

ethtool.c

ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings

2015-10-14 19:00:20 -07:00

fib_rules.c

fib_rules: fix fib rule dumps across multiple skbs

2015-09-24 15:21:54 -07:00

filter.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2015-10-20 06:08:27 -07:00

flow_dissector.c

flow_dissector: Use 'const' where possible.

2015-09-01 21:19:17 -07:00

flow.c

flow: Move __get_hash_from_flowi{4,6} into flow_dissector.c

2015-09-01 17:00:24 -07:00

gen_estimator.c

…

gen_stats.c

…

link_watch.c

…

lwtunnel.c

dst: Pass net into dst->output

2015-10-08 04:27:03 -07:00

Makefile

…

neighbour.c

net/neighbour: fix crash at dumping device-agnostic proxy entries

2015-12-03 00:07:51 -05:00

net_namespace.c

…

net-procfs.c

…

net-sysfs.c

switchdev: rename SWITCHDEV_ATTR_* enum values to SWITCHDEV_ATTR_ID_*

2015-10-03 04:49:37 -07:00

net-sysfs.h

…

net-traces.c

net: FIB tracepoints

2015-08-29 13:05:16 -07:00

netclassid_cgroup.c

Merge branch 'master' into for-4.4-fixes

2015-12-07 10:09:03 -05:00

netevent.c

…

netpoll.c

netpoll: Drop budget parameter from NAPI polling call hierarchy

2015-09-29 14:57:16 -07:00

netprio_cgroup.c

cgroup: fix handling of multi-destination migration from subtree_control enabling

2015-12-03 10:18:21 -05:00

pktgen.c

…

ptp_classifier.c

ptp: Change ptp_class to a proper bitmask

2015-11-03 11:08:22 -05:00

request_sock.c

tcp: restore fastopen operations

2015-10-05 03:19:06 -07:00

rtnetlink.c

rtnetlink: fix frame size warning in rtnl_fill_ifinfo

2015-11-17 15:25:44 -05:00

scm.c

net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

2015-11-22 20:34:58 -05:00

secure_seq.c

…

skbuff.c

net: check both type and procotol for tcp sockets

2015-12-17 15:46:32 -05:00

sock_diag.c

net/core: make sock_diag.c explicitly non-modular

2015-10-09 07:52:27 -07:00

sock.c

net: check both type and procotol for tcp sockets

2015-12-17 15:46:32 -05:00

stream.c

net: fix sock_wake_async() rcu protection

2015-12-01 15:45:05 -05:00

sysctl_net_core.c

…

timestamping.c

…

tso.c

net: tso: add support for IPv6

2015-10-26 22:24:22 -07:00

utils.c

net: move net_get_random_once to lib

2015-10-08 05:26:35 -07:00