iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Phil Sutter 1417b71985 netfilter: xt_owner: Fix for unsafe access of sk->sk_socket 
[ Upstream commit 7ae836a3d630e146b732fe8ef7d86b243748751f ]

A concurrently running sock_orphan() may NULL the sk_socket pointer in
between check and deref. Follow other users (like nft_meta.c for
instance) and acquire sk_callback_lock before dereferencing sk_socket.

Fixes: 0265ab44bacc ("[NETFILTER]: merge ipt_owner/ip6t_owner in xt_owner")
Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-12-13 18:45:10 +01:00
..
6lowpan
…
9p
9p: v9fs_listxattr: fix %s null argument warning
2023-11-28 17:19:46 +00:00
802
…
8021q
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-08-18 12:44:56 -07:00
appletalk
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
atm
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
ax25
ax25: Kconfig: Update link for linux-ax25.org
2023-09-18 12:56:58 +01:00
batman-adv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-08-24 10:51:39 -07:00
bluetooth
Bluetooth: Fix double free in hci_conn_cleanup
2023-11-28 17:19:38 +00:00
bpf
bpf: Prevent inlining of bpf_fentry_test7()
2023-08-30 08:36:17 +02:00
bpfilter
net: Use umd_cleanup_helper()
2023-05-31 13:06:57 +02:00
bridge
netfilter: nf_conntrack_bridge: initialize err to 0
2023-11-28 17:19:52 +00:00
caif
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
can
can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior
2023-10-06 12:54:33 +02:00
ceph
libceph: use kernel_connect()
2023-10-09 13:35:24 +02:00
core
bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
2023-12-08 08:52:23 +01:00
dcb
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-01 21:07:46 -07:00
dccp
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
2023-11-20 11:59:35 +01:00
devlink
devlink: Hold devlink lock on health reporter dump get
2023-10-06 15:56:46 -07:00
dns_resolver
…
dsa
net: dsa: mark parsed interface mode for legacy switch drivers
2023-08-09 13:08:09 -07:00
ethernet
…
ethtool
ethtool: don't propagate EOPNOTSUPP from dumps
2023-12-08 08:52:23 +01:00
handshake
net/handshake: fix file ref count in handshake_nl_accept_doit()
2023-10-23 10:19:33 -07:00
hsr
hsr: Prevent use after free in prp_create_tagged_frame()
2023-11-20 11:59:34 +01:00
ieee802154
sysctl-6.6-rc1
2023-08-29 17:39:15 -07:00
ife
…
ipv4
ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit()
2023-12-13 18:45:07 +01:00
ipv6
ipv6: fix potential NULL deref in fib6_add()
2023-12-13 18:45:03 +01:00
iucv
…
kcm
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
2023-09-14 10:43:51 +02:00
key
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-08-18 12:44:56 -07:00
l2tp
udp: annotate data-races around udp->encap_type
2023-11-20 11:58:56 +01:00
l3mdev
…
lapb
…
llc
llc: verify mac len before reading mac header
2023-11-20 11:59:34 +01:00
mac80211
wifi: mac80211: do not pass AP_VLAN vif pointer to drivers during flush
2023-12-08 08:52:21 +01:00
mac802154
Core WPAN changes:
2023-06-24 15:41:46 -07:00
mctp
mctp: perform route lookups under a RCU read-side lock
2023-10-10 19:43:22 -07:00
mpls
networking: Update to register_net_sysctl_sz
2023-08-15 15:26:18 -07:00
mptcp
mptcp: fix setsockopt(IP_TOS) subflow locking
2023-11-28 17:20:14 +00:00
ncsi
Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
2023-11-28 17:20:10 +00:00
netfilter
netfilter: xt_owner: Fix for unsafe access of sk->sk_socket
2023-12-13 18:45:10 +01:00
netlabel
netlabel: Remove unused declaration netlbl_cipsov4_doi_free()
2023-08-02 12:28:22 -07:00
netlink
netlink: annotate data-races around sk->sk_err
2023-10-04 17:32:54 -07:00
netrom
netrom: Deny concurrent connect().
2023-08-28 06:58:46 +01:00
nfc
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
2023-10-16 17:34:53 -07:00
nsh
net: move gso declarations and functions to their own files
2023-06-10 00:11:41 -07:00
openvswitch
net/sched: act_ct: Always fill offloading tuple iifidx
2023-11-20 11:59:37 +01:00
packet
af_packet: Fix fortified memcpy() without flex array.
2023-10-12 09:15:15 +02:00
phonet
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
psample
…
qrtr
net: qrtr: Handle IPCR control port format of older targets
2023-07-17 09:02:30 +01:00
rds
net: prevent address rewrite in kernel_bind()
2023-10-01 19:31:29 +01:00
rfkill
net: rfkill: reduce data->mtx scope in rfkill_fop_open
2023-10-11 16:55:10 +02:00
rose
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
rxrpc
rxrpc: Defer the response to a PING ACK until we've parsed it
2023-12-03 07:33:02 +01:00
sched
net: sched: do not offload flows with a helper in act_ct
2023-11-28 17:19:54 +00:00
sctp
sctp: update hb timer immediately after users change hb_interval
2023-10-04 17:29:58 -07:00
smc
net/smc: avoid data corruption caused by decline
2023-12-03 07:33:04 +01:00
strparser
…
sunrpc
svcrdma: Drop connection after an RDMA Read error
2023-11-28 17:20:02 +00:00
switchdev
net: switchdev: Add a helper to replay objects on a bridge port
2023-07-21 08:54:03 +01:00
tipc
tipc: Fix kernel-infoleak due to uninitialized TLV value
2023-11-28 17:19:51 +00:00
tls
tls: fix NULL deref on tls_sw_splice_eof() with empty record
2023-12-03 07:33:07 +01:00
unix
bpf, sockmap: af_unix stream sockets need to hold ref for pair sock
2023-12-08 08:52:23 +01:00
vmw_vsock
vsock: read from socket's error queue
2023-11-28 17:19:38 +00:00
wireless
Revert "wifi: cfg80211: fix CQM for non-range use"
2023-12-11 10:40:17 +01:00
x25
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
xdp
xsk: Skip polling event check for unbound socket
2023-12-13 18:45:06 +01:00
xfrm
ipsec-2023-10-17
2023-10-17 18:21:13 -07:00
compat.c
…
devres.c
…
Kconfig
bpf: Add fd-based tcx multi-prog infra with link support
2023-07-19 10:07:27 -07:00
Kconfig.debug
…
Makefile
…
socket.c
net: prevent address rewrite in kernel_bind()
2023-10-01 19:31:29 +01:00
sysctl_net.c
sysctl: Add size to register_net_sysctl function
2023-08-15 15:26:17 -07:00