iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Sabrina Dubroca 32b55c5ff9 net: tls: fix use-after-free with partial reads and async decrypt 
tls_decrypt_sg doesn't take a reference on the pages from clear_skb,
so the put_page() in tls_decrypt_done releases them, and we trigger
a use-after-free in process_rx_list when we try to read from the
partially-read skb.

Fixes: fd31f3996af2 ("tls: rx: decrypt into a fresh skb")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2024-02-10 21:38:19 +00:00
..
6lowpan
net: fill in MODULE_DESCRIPTION()s for 6LoWPAN
2024-02-09 14:12:01 -08:00
9p
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
2023-12-13 05:44:30 +09:00
802
net: fill in MODULE_DESCRIPTION()s under net/802*
2023-10-28 11:29:28 +01:00
8021q
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
2024-01-19 21:25:06 -08:00
appletalk
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
atm
net: fill in MODULE_DESCRIPTION()s for mpoa
2024-02-09 14:12:01 -08:00
ax25
net: implement lockless SO_PRIORITY
2023-10-01 19:09:54 +01:00
batman-adv
batman-adv: mcast: fix memory leak on deleting a batman-adv interface
2024-01-27 09:13:39 +01:00
bluetooth
TTY/Serial changes for 6.8-rc1
2024-01-18 11:37:24 -08:00
bpf
bpf: Fix dtor CFI
2023-12-15 16:25:55 -08:00
bridge
bridge: mcast: fix disabled snooping after long uptime
2024-01-30 18:06:56 -08:00
caif
net: fill in MODULE_DESCRIPTION()s for CAIF
2024-01-05 08:06:35 -08:00
can
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-10-12 17:07:34 -07:00
ceph
libceph: remove MAX_EXTENTS check for sparse reads
2024-01-15 15:40:50 +01:00
core
net: Fix from address in memcpy_to_iter_csum()
2024-02-02 12:21:02 +00:00
dcb
…
dccp
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
devlink
devlink: avoid potential loop in devlink_rel_nested_in_notify_work()
2024-02-06 18:45:16 -08:00
dns_resolver
Networking changes for 6.8.
2024-01-11 10:07:29 -08:00
dsa
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
2024-01-11 16:33:52 -08:00
ethernet
…
ethtool
ethtool: netlink: Add missing ethnl_ops_begin/complete
2024-01-18 13:21:06 +01:00
handshake
net/handshake: Fix handshake_req_destroy_test1
2024-02-08 18:32:29 -08:00
hsr
net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
2024-01-29 11:29:55 +00:00
ieee802154
mac802154: Avoid new associations while disassociating
2023-12-15 11:14:57 +01:00
ife
net: sched: ife: fix potential use-after-free
2023-12-15 10:50:18 +00:00
ipv4
net: fill in MODULE_DESCRIPTION()s for ipv4 modules
2024-02-09 14:12:02 -08:00
ipv6
net: fill in MODULE_DESCRIPTION()s for ipv6 modules
2024-02-09 14:12:01 -08:00
iucv
iucv: make iucv_bus const
2023-12-29 07:46:38 +00:00
kcm
net: kcm: fix direct access to bv_len
2024-01-03 18:37:22 -08:00
key
net: fill in MODULE_DESCRIPTION()s for af_key
2024-02-09 14:12:01 -08:00
l2tp
ipv6: annotate data-races around np->ucast_oif
2023-12-11 10:59:17 +00:00
l3mdev
…
lapb
…
llc
llc: call sock_orphan() at release time
2024-01-30 13:49:09 +01:00
mac80211
wifi: mac80211: accept broadcast probe responses on 6 GHz
2024-02-02 13:11:59 +01:00
mac802154
mac802154: Avoid new associations while disassociating
2023-12-15 11:14:57 +01:00
mctp
mctp: perform route lookups under a RCU read-side lock
2023-10-10 19:43:22 -07:00
mpls
networking: Update to register_net_sysctl_sz
2023-08-15 15:26:18 -07:00
mptcp
mptcp: fix data re-injection from stale subflow
2024-02-01 09:06:37 -08:00
ncsi
net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
2023-11-18 15:00:51 +00:00
netfilter
netfilter: nft_set_pipapo: remove scratch_aligned pointer
2024-02-08 12:24:02 +01:00
netlabel
calipso: fix memory leak in netlbl_calipso_add_pass()
2023-12-07 14:23:12 -05:00
netlink
netlink: fix potential sleeping issue in mqueue_flush_file
2024-01-23 11:21:18 +01:00
netrom
net: implement lockless SO_PRIORITY
2023-10-01 19:09:54 +01:00
nfc
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
2024-01-29 12:05:31 +00:00
nsh
…
openvswitch
net: openvswitch: limit the number of recursions from action sets
2024-02-09 12:54:38 -08:00
packet
net: fill in MODULE_DESCRIPTION() for AF_PACKET
2024-01-05 08:06:35 -08:00
phonet
…
psample
genetlink: Use internal flags for multicast groups
2023-12-29 08:43:59 +00:00
qrtr
net: qrtr: ns: Return 0 if server port is not present
2024-01-01 18:41:29 +00:00
rds
net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
2024-01-22 11:24:00 +00:00
rfkill
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-12-21 22:17:23 +01:00
rose
net/rose: fix races in rose_kill_by_device()
2023-12-15 11:59:53 +00:00
rxrpc
rxrpc: Fix counting of new acks and nacks
2024-02-05 12:34:07 +00:00
sched
net: fill in MODULE_DESCRIPTION()s for net/sched
2024-02-09 14:12:02 -08:00
sctp
sctp: fix busy polling
2024-01-04 10:29:18 +00:00
smc
net/smc: fix incorrect SMC-D link group matching logic
2024-01-26 14:06:05 -08:00
strparser
…
sunrpc
NFSv4.1: Assign the right value for initval and retries for rpc timeout
2024-01-29 13:39:48 -05:00
switchdev
…
tipc
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
2024-02-06 08:49:26 +01:00
tls
net: tls: fix use-after-free with partial reads and async decrypt
2024-02-10 21:38:19 +00:00
unix
af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
2024-02-06 18:33:07 -08:00
vmw_vsock
vsock/virtio: use skb_frag_*() helpers
2024-01-03 18:37:16 -08:00
wireless
wifi: cfg80211: detect stuck ECSA element in probe resp
2024-02-02 13:08:58 +01:00
x25
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
xdp
xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags
2024-01-24 16:24:06 -08:00
xfrm
net: fill in MODULE_DESCRIPTION()s for xfrm
2024-02-09 14:12:01 -08:00
compat.c
file: stop exposing receive_fd_user()
2023-12-12 14:24:14 +01:00
devres.c
…
Kconfig
bpfilter: remove bpfilter
2024-01-04 10:23:10 -08:00
Kconfig.debug
…
Makefile
bpfilter: remove bpfilter
2024-01-04 10:23:10 -08:00
socket.c
vfs-6.8.iov_iter
2024-01-08 11:43:04 -08:00
sysctl_net.c
sysctl: Add size to register_net_sysctl function
2023-08-15 15:26:17 -07:00