iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Pablo Neira Ayuso 9a3b90904d netfilter: nf_tables: discard table flag update with pending basechain deletion 
commit 1bc83a019bbe268be3526406245ec28c2458a518 upstream.

Hook unregistration is deferred to the commit phase, same occurs with
hook updates triggered by the table dormant flag. When both commands are
combined, this results in deleting a basechain while leaving its hook
still registered in the core.

Fixes: 179d9ba5559a ("netfilter: nf_tables: fix table flag updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-04-13 12:51:39 +02:00
..
6lowpan
6lowpan: iphc: Fix an off-by-one check of array index
2021-09-15 09:47:31 +02:00
9p
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
2024-01-08 11:29:47 +01:00
802
mrp: introduce active flags to prevent UAF when applicant uninit
2023-01-18 11:41:37 +01:00
8021q
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
2024-02-23 08:24:50 +01:00
appletalk
appletalk: Fix Use-After-Free in atalk_ioctl
2023-12-20 15:41:18 +01:00
atm
atm: Fix Use-After-Free in do_vcc_ioctl
2023-12-20 15:41:15 +01:00
ax25
ax25: Fix UAF bugs in ax25 timers
2022-04-20 09:19:40 +02:00
batman-adv
batman-adv: Hold rtnl lock during MTU update via netlink
2023-08-30 16:27:25 +02:00
bluetooth
Bluetooth: Fix TOCTOU in HCI debugfs implementation
2024-04-13 12:51:33 +02:00
bpf
bpf: Move skb->len == 0 checks into __bpf_redirect
2023-01-18 11:41:04 +01:00
bpfilter
bpfilter: Specify the log level for the kmsg message
2021-07-14 16:53:33 +02:00
bridge
net: bridge: clear bridge's private skb space on xmit
2024-03-01 13:13:35 +01:00
caif
net: caif: Fix use-after-free in cfusbl_device_notify()
2023-03-17 08:32:51 +01:00
can
can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
2024-02-23 08:25:13 +01:00
ceph
libceph: use kernel_connect()
2023-10-25 11:53:19 +02:00
core
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
2024-04-13 12:51:34 +02:00
dcb
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-11 11:53:57 +02:00
dccp
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
2023-11-20 10:30:15 +01:00
decnet
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
dns_resolver
…
dsa
net: dsa: tag_sja1105: fix MAC DA patching from meta frames
2023-07-27 08:37:24 +02:00
ethernet
…
hsr
hsr: Handle failures in module init
2024-03-26 18:22:25 -04:00
ieee802154
net: ieee802154: fix error return code in dgram_bind()
2022-11-03 23:56:54 +09:00
ife
net: sched: ife: fix potential use-after-free
2024-01-08 11:29:44 +01:00
ipv4
erspan: make sure erspan_base_hdr is present in skb->head
2024-04-13 12:51:36 +02:00
ipv6
erspan: make sure erspan_base_hdr is present in skb->head
2024-04-13 12:51:36 +02:00
iucv
net/iucv: fix the allocation size of iucv_path_table array
2024-03-26 18:22:12 -04:00
kcm
net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
2024-03-26 18:22:18 -04:00
key
net: af_key: fix sadb_x_filter validation
2023-08-30 16:27:16 +02:00
l2tp
l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
2024-03-26 18:22:17 -04:00
l3mdev
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-27 13:50:47 +02:00
lapb
net: lapb: Copy the skb before sending a packet
2021-02-10 09:25:28 +01:00
llc
llc: call sock_orphan() at release time
2024-02-23 08:25:04 +01:00
mac80211
wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
2024-04-13 12:51:31 +02:00
mac802154
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
2022-12-14 11:30:45 +01:00
mpls
net: mpls: fix stale pointer if allocation fails during device rename
2023-02-22 12:50:41 +01:00
ncsi
net/ncsi: Fix netlink major/minor version numbers
2024-01-25 14:34:25 -08:00
netfilter
netfilter: nf_tables: discard table flag update with pending basechain deletion
2024-04-13 12:51:39 +02:00
netlabel
calipso: fix memory leak in netlbl_calipso_add_pass()
2024-01-25 14:34:23 -08:00
netlink
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
2024-03-06 14:36:08 +00:00
netrom
netrom: Fix data-races around sysctl_net_busy_read
2024-03-15 10:48:16 -04:00
nfc
nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
2024-04-13 12:51:33 +02:00
nsh
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
2023-05-30 12:44:05 +01:00
openvswitch
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
2023-02-22 12:50:25 +01:00
packet
packet: annotate data-races around ignore_outgoing
2024-03-26 18:22:25 -04:00
phonet
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
psample
psample: Require 'CAP_NET_ADMIN' when joining "packets" group
2023-12-13 18:18:17 +01:00
qrtr
net: qrtr: fix another OOB Read in qrtr_endpoint_post
2021-09-03 10:08:12 +02:00
rds
net/rds: fix possible cp null dereference
2024-04-13 12:51:33 +02:00
rfkill
net: rfkill: gpio: set GPIO direction
2024-01-08 11:29:47 +01:00
rose
net/rose: fix races in rose_kill_by_device()
2024-01-08 11:29:44 +01:00
rxrpc
rxrpc: Fix response to PING RESPONSE ACKs to a dead call
2024-02-23 08:25:07 +01:00
sched
net/sched: act_skbmod: prevent kernel-infoleak
2024-04-13 12:51:34 +02:00
sctp
sctp: update hb timer immediately after users change hb_interval
2023-10-10 21:46:45 +02:00
smc
net/smc: fix illegal rmb_desc access in SMC-D connection dump
2024-02-23 08:24:50 +01:00
strparser
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-17 09:48:48 +01:00
sunrpc
net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
2024-03-26 18:22:23 -04:00
switchdev
net: switchdev: do not propagate bridge updates across bridges
2021-10-27 09:54:24 +02:00
tipc
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
2024-02-23 08:25:07 +01:00
tls
tls: stop recv() if initial process_rx_list gave us non-DATA
2024-03-01 13:13:37 +01:00
unix
af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
2024-03-26 18:22:15 -04:00
vmw_vsock
virtio/vsock: fix logic which reduces credit update messages
2024-01-25 14:34:25 -08:00
wimax
…
wireless
wifi: nl80211: reject iftype change with mesh ID change
2024-03-06 14:36:09 +00:00
x25
net/x25: fix incorrect parameter validation in the x25_getsockopt() function
2024-03-26 18:22:18 -04:00
xdp
xsk: Honor SO_BINDTODEVICE on bind
2023-07-27 08:37:23 +02:00
xfrm
xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
2024-04-13 12:51:28 +02:00
compat.c
net: Return the correct errno code
2021-06-18 09:59:00 +02:00
Kconfig
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
Makefile
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
socket.c
net: Save and restore msg_namelen in sock_sendmsg
2024-01-15 18:25:26 +01:00
sysctl_net.c
…