iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Gavrilov Ilia e06f0d3f66 net/x25: fix incorrect parameter validation in the x25_getsockopt() function 
[ Upstream commit d6eb8de2015f0c24822e47356f839167ebde2945 ]

The 'len' variable can't be negative when assigned the result of
'min_t' because all 'min_t' parameters are cast to unsigned int,
and then the minimum one is chosen.

To fix the logic, check 'len' as read from 'optlen',
where the types of relevant variables are (signed) int.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Gavrilov Ilia <Ilia.Gavrilov@infotecs.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-03-26 18:22:18 -04:00
..
6lowpan
6lowpan: iphc: Fix an off-by-one check of array index
2021-09-15 09:47:31 +02:00
9p
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
2024-01-08 11:29:47 +01:00
802
mrp: introduce active flags to prevent UAF when applicant uninit
2023-01-18 11:41:37 +01:00
8021q
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
2024-02-23 08:24:50 +01:00
appletalk
appletalk: Fix Use-After-Free in atalk_ioctl
2023-12-20 15:41:18 +01:00
atm
atm: Fix Use-After-Free in do_vcc_ioctl
2023-12-20 15:41:15 +01:00
ax25
ax25: Fix UAF bugs in ax25 timers
2022-04-20 09:19:40 +02:00
batman-adv
batman-adv: Hold rtnl lock during MTU update via netlink
2023-08-30 16:27:25 +02:00
bluetooth
Bluetooth: hci_core: Fix possible buffer overflow
2024-03-26 18:22:17 -04:00
bpf
bpf: Move skb->len == 0 checks into __bpf_redirect
2023-01-18 11:41:04 +01:00
bpfilter
bpfilter: Specify the log level for the kmsg message
2021-07-14 16:53:33 +02:00
bridge
net: bridge: clear bridge's private skb space on xmit
2024-03-01 13:13:35 +01:00
caif
net: caif: Fix use-after-free in cfusbl_device_notify()
2023-03-17 08:32:51 +01:00
can
can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
2024-02-23 08:25:13 +01:00
ceph
libceph: use kernel_connect()
2023-10-25 11:53:19 +02:00
core
sock_diag: annotate data-races around sock_diag_handlers[family]
2024-03-26 18:22:14 -04:00
dcb
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-11 11:53:57 +02:00
dccp
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
2023-11-20 10:30:15 +01:00
decnet
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
dns_resolver
…
dsa
net: dsa: tag_sja1105: fix MAC DA patching from meta frames
2023-07-27 08:37:24 +02:00
ethernet
…
hsr
hsr: Avoid double remove of a node.
2023-01-18 11:41:09 +01:00
ieee802154
net: ieee802154: fix error return code in dgram_bind()
2022-11-03 23:56:54 +09:00
ife
net: sched: ife: fix potential use-after-free
2024-01-08 11:29:44 +01:00
ipv4
udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
2024-03-26 18:22:17 -04:00
ipv6
ipv6: fib6_rules: flush route cache when rule is changed
2024-03-26 18:22:17 -04:00
iucv
net/iucv: fix the allocation size of iucv_path_table array
2024-03-26 18:22:12 -04:00
kcm
net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
2024-03-26 18:22:18 -04:00
key
net: af_key: fix sadb_x_filter validation
2023-08-30 16:27:16 +02:00
l2tp
l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
2024-03-26 18:22:17 -04:00
l3mdev
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-27 13:50:47 +02:00
lapb
net: lapb: Copy the skb before sending a packet
2021-02-10 09:25:28 +01:00
llc
llc: call sock_orphan() at release time
2024-02-23 08:25:04 +01:00
mac80211
wifi: mac80211: fix race condition on enabling fast-xmit
2024-03-01 13:13:33 +01:00
mac802154
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
2022-12-14 11:30:45 +01:00
mpls
net: mpls: fix stale pointer if allocation fails during device rename
2023-02-22 12:50:41 +01:00
ncsi
net/ncsi: Fix netlink major/minor version numbers
2024-01-25 14:34:25 -08:00
netfilter
netfilter: nf_conntrack_h323: Add protection for bmp length out of range
2024-03-15 10:48:15 -04:00
netlabel
calipso: fix memory leak in netlbl_calipso_add_pass()
2024-01-25 14:34:23 -08:00
netlink
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
2024-03-06 14:36:08 +00:00
netrom
netrom: Fix data-races around sysctl_net_busy_read
2024-03-15 10:48:16 -04:00
nfc
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
2024-02-23 08:25:11 +01:00
nsh
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
2023-05-30 12:44:05 +01:00
openvswitch
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
2023-02-22 12:50:25 +01:00
packet
packet: move from strlcpy with unused retval to strscpy
2024-03-01 13:13:37 +01:00
phonet
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
psample
psample: Require 'CAP_NET_ADMIN' when joining "packets" group
2023-12-13 18:18:17 +01:00
qrtr
net: qrtr: fix another OOB Read in qrtr_endpoint_post
2021-09-03 10:08:12 +02:00
rds
net/rds: fix WARNING in rds_conn_connect_if_down
2024-03-15 10:48:14 -04:00
rfkill
net: rfkill: gpio: set GPIO direction
2024-01-08 11:29:47 +01:00
rose
net/rose: fix races in rose_kill_by_device()
2024-01-08 11:29:44 +01:00
rxrpc
rxrpc: Fix response to PING RESPONSE ACKs to a dead call
2024-02-23 08:25:07 +01:00
sched
net/sched: Retire dsmark qdisc
2024-03-01 13:13:32 +01:00
sctp
sctp: update hb timer immediately after users change hb_interval
2023-10-10 21:46:45 +02:00
smc
net/smc: fix illegal rmb_desc access in SMC-D connection dump
2024-02-23 08:24:50 +01:00
strparser
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-17 09:48:48 +01:00
sunrpc
SUNRPC: fix some memleaks in gssx_dec_option_array
2024-03-26 18:22:16 -04:00
switchdev
net: switchdev: do not propagate bridge updates across bridges
2021-10-27 09:54:24 +02:00
tipc
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
2024-02-23 08:25:07 +01:00
tls
tls: stop recv() if initial process_rx_list gave us non-DATA
2024-03-01 13:13:37 +01:00
unix
af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
2024-03-26 18:22:15 -04:00
vmw_vsock
virtio/vsock: fix logic which reduces credit update messages
2024-01-25 14:34:25 -08:00
wimax
…
wireless
wifi: nl80211: reject iftype change with mesh ID change
2024-03-06 14:36:09 +00:00
x25
net/x25: fix incorrect parameter validation in the x25_getsockopt() function
2024-03-26 18:22:18 -04:00
xdp
xsk: Honor SO_BINDTODEVICE on bind
2023-07-27 08:37:23 +02:00
xfrm
xfrm: interface: use DEV_STATS_INC()
2023-10-25 11:53:21 +02:00
compat.c
net: Return the correct errno code
2021-06-18 09:59:00 +02:00
Kconfig
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
Makefile
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
socket.c
net: Save and restore msg_namelen in sock_sendmsg
2024-01-15 18:25:26 +01:00
sysctl_net.c
…