iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Pablo Neira Ayuso 26b5934ff4 netfilter: nf_tables: release flow rule object from commit path 
No need to postpone this to the commit release path, since no packets
are walking over this object, this is accessed from control plane only.
This helped uncovered UAF triggered by races with the netlink notifier.

Fixes: 9dd732e0bdf5 ("netfilter: nf_tables: memleak flow rule from commit path")
Reported-by: syzbot+8f747f62763bc6c32916@syzkaller.appspotmail.com
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2022-11-01 12:19:47 +01:00
..
6lowpan
net: 6lowpan: constify lowpan_nhc structures
2022-06-09 21:53:28 +02:00
9p
net/9p: clarify trans_fd parse_opt failure handling
2022-10-07 21:23:09 +09:00
802
treewide: use prandom_u32_max() when possible, part 1
2022-10-11 17:42:55 -06:00
8021q
net: gro: skb_gro_header helper function
2022-08-25 10:33:21 +02:00
appletalk
…
atm
net/atm: fix proc_mpc_write incorrect return value
2022-10-15 11:08:36 +01:00
ax25
ax25: move from strlcpy with unused retval to strscpy
2022-08-22 17:55:50 -07:00
batman-adv
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-09-22 13:02:10 -07:00
bluetooth
Driver core changes for 6.1-rc1
2022-10-07 17:04:10 -07:00
bpf
selftests/bpf: Add tests for kfunc returning a memory pointer
2022-09-07 11:05:17 -07:00
bpfilter
…
bridge
net: bridge: assign path_cost for 2.5G and 5G link speed
2022-09-30 12:35:29 +01:00
caif
caif: move from strlcpy with unused retval to strscpy
2022-08-22 17:57:35 -07:00
can
can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()
2022-10-27 13:34:23 +02:00
ceph
Random number generator fixes for Linux 6.1-rc1.
2022-10-16 15:27:07 -07:00
core
net: do not sense pfmemalloc status in skb_append_pagefrags()
2022-10-27 11:25:13 -07:00
dcb
…
dccp
treewide: use get_random_{u8,u16}() when possible, part 1
2022-10-11 17:42:58 -06:00
dns_resolver
…
dsa
net: dsa: fall back to default tagger if we can't load the one from DT
2022-10-28 21:58:30 -07:00
ethernet
net: gro: skb_gro_header helper function
2022-08-25 10:33:21 +02:00
ethtool
ethtool: eeprom: fix null-deref on genl_info in dump
2022-10-24 19:08:07 -07:00
hsr
net: hsr: avoid possible NULL deref in skb_clone()
2022-10-18 19:18:27 -07:00
ieee802154
net: ieee802154: fix error return code in dgram_bind()
2022-10-07 09:29:17 +02:00
ife
…
ipv4
net: also flag accepted sockets supporting msghdr originated zerocopy
2022-10-28 20:21:25 -07:00
ipv6
udp: advertise ipv6 udp support for msghdr::ubuf_info
2022-10-28 20:21:25 -07:00
iucv
net: keep sk->sk_forward_alloc as small as possible
2022-06-10 16:21:27 -07:00
kcm
kcm: do not sense pfmemalloc status in kcm_sendpage()
2022-10-27 11:25:13 -07:00
key
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2022-08-24 12:51:50 +01:00
l2tp
genetlink: start to validate reserved header bytes
2022-08-29 12:47:15 +01:00
l3mdev
…
lapb
…
llc
net: rename reference+tracking helpers
2022-06-09 21:52:55 -07:00
mac80211
Random number generator fixes for Linux 6.1-rc1.
2022-10-16 15:27:07 -07:00
mac802154
mac802154: Fix LQI recording
2022-10-24 11:07:39 +02:00
mctp
mctp: prevent double key removal and unref
2022-10-12 13:30:50 +01:00
mpls
net: Use u64_stats_fetch_begin_irq() for stats fetch.
2022-08-29 13:02:27 +01:00
mptcp
mptcp: fix abba deadlock on fastopen
2022-10-24 21:13:56 -07:00
ncsi
genetlink: start to validate reserved header bytes
2022-08-29 12:47:15 +01:00
netfilter
netfilter: nf_tables: release flow rule object from commit path
2022-11-01 12:19:47 +01:00
netlabel
genetlink: start to validate reserved header bytes
2022-08-29 12:47:15 +01:00
netlink
genetlink: limit the use of validation workarounds to old ops
2022-10-27 08:20:21 -07:00
netrom
…
nfc
NFC: hci: Split memcpy() of struct hcp_message flexible array
2022-09-27 07:45:18 -07:00
nsh
…
openvswitch
net: openvswitch: add missing .resv_start_op
2022-10-28 20:19:53 -07:00
packet
treewide: use prandom_u32_max() when possible, part 1
2022-10-11 17:42:55 -06:00
phonet
…
psample
genetlink: start to validate reserved header bytes
2022-08-29 12:47:15 +01:00
qrtr
net: qrtr: start MHI channel after endpoit creation
2022-08-15 11:21:42 +01:00
rds
treewide: use get_random_{u8,u16}() when possible, part 2
2022-10-11 17:42:58 -06:00
rfkill
…
rose
rose: check NULL rose_loopback_neigh->loopback
2022-08-22 14:24:54 +01:00
rxrpc
rxrpc: remove rxrpc_max_call_lifetime declaration
2022-09-19 17:58:47 -07:00
sched
net: sched: Fix use after free in red_enqueue()
2022-10-31 11:55:39 +00:00
sctp
treewide: use get_random_{u8,u16}() when possible, part 1
2022-10-11 17:42:58 -06:00
smc
net/smc: Fix an error code in smc_lgr_create()
2022-10-15 11:12:12 +01:00
strparser
strparser: pad sk_skb_cb to avoid straddling cachelines
2022-07-08 18:38:44 -07:00
sunrpc
Random number generator fixes for Linux 6.1-rc1.
2022-10-16 15:27:07 -07:00
switchdev
net: rename reference+tracking helpers
2022-06-09 21:52:55 -07:00
tipc
tipc: fix a null-ptr-deref in tipc_topsrv_accept
2022-10-20 21:08:17 -07:00
tls
tls: strp: make sure the TCP skbs do not have overlapping data
2022-10-14 08:25:26 +01:00
unix
net: remove SOCK_SUPPORT_ZC from sockmap
2022-10-28 20:21:25 -07:00
vmw_vsock
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-10-03 17:44:18 -07:00
wireless
Merge branch 'cve-fixes-2022-10-13'
2022-10-13 11:59:56 +02:00
x25
net/x25: fix call timeouts in blocking connects
2022-08-08 20:48:51 -07:00
xdp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-10-03 17:44:18 -07:00
xfrm
treewide: use prandom_u32_max() when possible, part 1
2022-10-11 17:42:55 -06:00
compat.c
net: clear msg_get_inq in __get_compat_msghdr()
2022-09-20 08:23:20 -07:00
devres.c
…
Kconfig
Remove DECnet support from kernel
2022-08-22 14:26:30 +01:00
Kconfig.debug
net: make NET_(DEV|NS)_REFCNT_TRACKER depend on NET
2022-09-20 14:23:56 -07:00
Makefile
Remove DECnet support from kernel
2022-08-22 14:26:30 +01:00
socket.c
d_path pile
2022-10-06 16:55:41 -07:00
sysctl_net.c
…