iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Pablo Neira Ayuso a54fa5dff8 netfilter: nft_flow_offload: skip tcp rst and fin packets 
[ Upstream commit dfe42be15fde16232340b8b2a57c359f51cc10d9 ]

TCP rst and fin packets do not qualify to place a flow into the
flowtable. Most likely there will be no more packets after connection
closure. Without this patch, this flow entry expires and connection
tracking picks up the entry in ESTABLISHED state using the fixup
timeout, which makes this look inconsistent to the user for a connection
that is actually already closed.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2019-09-10 10:33:44 +01:00
..
6lowpan
6lowpan: iphc: reset mac_header after decompress to fix panic
2018-07-06 12:32:12 +02:00
9p
9p/virtio: Add cleanup path in p9_virtio_init
2019-07-26 09:14:25 +02:00
802
…
8021q
vlan: disable SIOCSHWTSTAMP in container
2019-05-16 19:41:30 +02:00
appletalk
appletalk: Fix use-after-free in atalk_proc_exit
2019-04-20 09:16:05 +02:00
atm
net: atm: Fix potential Spectre v1 vulnerabilities
2019-04-27 09:36:30 +02:00
ax25
ax25: fix inconsistent lock state in ax25_destroy_timer
2019-06-22 08:15:13 +02:00
batman-adv
batman-adv: Fix duplicated OGMs on NETDEV_UP
2019-07-26 09:14:03 +02:00
bluetooth
Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
2019-07-26 09:14:30 +02:00
bpf
bpf/test_run: support cgroup local storage
2018-08-03 00:47:32 +02:00
bpfilter
net: bpfilter: use get_pid_task instead of pid_task
2018-10-17 22:03:40 -07:00
bridge
netfilter: ebtables: fix a memory leak bug in compat
2019-08-29 08:28:28 +02:00
caif
Revert "net: simplify sock_poll_wait"
2018-11-04 14:50:51 +01:00
can
can: gw: Fix error path of cgw_module_init
2019-08-29 08:28:30 +02:00
ceph
libceph: fix PG split vs OSD (re)connect race
2019-08-29 08:28:50 +02:00
core
net: fix skb use after free in netpoll
2019-09-10 10:33:38 +01:00
dcb
net: dcb: Add priority-to-DSCP map getters
2018-07-27 13:17:50 -07:00
dccp
dccp: do not use ipv6 header for ipv4 flow
2019-04-03 06:26:15 +02:00
decnet
decnet: fix using plain integer as NULL warning
2018-08-09 14:11:24 -07:00
dns_resolver
net: remove blank lines at end of file
2018-07-24 14:10:43 -07:00
dsa
net: dsa: Check existence of .port_mdb_add callback before calling it
2019-08-25 10:48:03 +02:00
ethernet
net: Convert GRO SKB handling to list_head.
2018-06-26 11:33:04 +09:00
hsr
net/hsr: fix possible crash in add_timer()
2019-03-19 13:12:38 +01:00
ieee802154
ieee802154: lowpan_header_create check must check daddr
2019-01-09 17:38:31 +01:00
ife
…
ipv4
tcp: remove empty skb from write queue in error cases
2019-09-10 10:33:40 +01:00
ipv6
mld: fix memory leak in mld_del_delrec()
2019-09-10 10:33:38 +01:00
iucv
Revert "net: simplify sock_poll_wait"
2018-11-04 14:50:51 +01:00
kcm
kcm: switch order of device registration to fix a crash
2019-04-17 08:38:40 +02:00
key
af_key: fix leaks in key_pol_get_resp and dump_sp.
2019-07-26 09:14:01 +02:00
l2tp
compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
2019-08-09 17:52:34 +02:00
l3mdev
…
lapb
lapb: fixed leak of control-blocks.
2019-06-22 08:15:13 +02:00
llc
llc: fix skb leak in llc_build_and_send_ui_pkt()
2019-06-04 08:02:31 +02:00
mac80211
mac80211: Correctly set noencrypt for PAE frames
2019-09-06 10:22:21 +02:00
mac802154
net: mac802154: tx: expand tailroom if necessary
2018-08-06 11:21:37 +02:00
mpls
mpls: Return error for RTA_GATEWAY attribute
2019-03-10 07:17:19 +01:00
ncsi
net/ncsi: Fixup .dumpit message flags and ID check in Netlink handler
2018-08-22 21:39:08 -07:00
netfilter
netfilter: nft_flow_offload: skip tcp rst and fin packets
2019-09-10 10:33:44 +01:00
netlabel
netlabel: fix out-of-bounds memory accesses
2019-03-10 07:17:18 +01:00
netlink
genetlink: Fix a memory leak on error path
2019-04-03 06:26:15 +02:00
netrom
netrom: hold sock when setting skb->destructor
2019-07-28 08:29:27 +02:00
nfc
nfc: fix potential illegal memory access
2019-07-28 08:29:25 +02:00
nsh
nsh: set mac len based on inner packet
2018-07-12 16:55:29 -07:00
openvswitch
net: openvswitch: fix csum updates for MPLS actions
2019-07-28 08:29:24 +02:00
packet
net/packet: fix race in tpacket_snd()
2019-08-25 10:48:04 +02:00
phonet
phonet: fix building with clang
2019-03-23 20:09:51 +01:00
psample
net: sched: act_sample: fix psample group handling on overwrite
2019-09-10 10:33:38 +01:00
qrtr
net: qrtr: Reset the node and port ID of broadcast messages
2018-07-05 20:20:03 +09:00
rds
net/rds: Fix info leak in rds6_inc_info_copy()
2019-09-10 10:33:40 +01:00
rfkill
Here are quite a large number of fixes, notably:
2018-09-03 22:12:02 -07:00
rose
net/rose: fix unbound loop in rose_loopback_timer()
2019-05-02 09:59:00 +02:00
rxrpc
rxrpc: Fix local refcounting
2019-08-29 08:28:59 +02:00
sched
net_sched: fix a NULL pointer deref in ipt action
2019-09-10 10:33:39 +01:00
sctp
sctp: fix the transport error_count check
2019-08-25 10:48:04 +02:00
smc
net/smc: make sure EPOLLOUT is raised
2019-09-06 10:22:06 +02:00
strparser
net: strparser: partially revert "strparser: Call skb_unclone conditionally"
2019-05-16 19:41:27 +02:00
sunrpc
net :sunrpc :clnt :Fix xps refcount imbalance on the error path
2019-07-14 08:11:15 +02:00
switchdev
…
tipc
tipc: initialise addr_trail_end when setting node addresses
2019-08-25 10:48:05 +02:00
tls
net: tls, fix sk_write_space NULL write when tx disabled
2019-09-06 10:22:04 +02:00
unix
missing barriers in some of unix_sock ->addr and ->path accesses
2019-03-19 13:12:41 +01:00
vmw_vsock
vsock: correct removal of socket from the list
2019-08-04 09:30:51 +02:00
wimax
wimax: remove blank lines at EOF
2018-07-24 14:10:42 -07:00
wireless
Revert "cfg80211: fix processing world regdomain when non modular"
2019-09-06 10:22:21 +02:00
x25
net/x25: fix a race in x25_bind()
2019-03-19 13:12:40 +01:00
xdp
xsk: Properly terminate assignment in xskq_produce_flush_desc
2019-07-26 09:14:12 +02:00
xfrm
ipsec: select crypto ciphers for xfrm_algo
2019-07-26 09:14:10 +02:00
compat.c
sock: Make sock->sk_stamp thread-safe
2019-01-09 17:38:33 +01:00
Kconfig
net: remove blank lines at end of file
2018-07-24 14:10:43 -07:00
Makefile
bpfilter: check compiler capability in Kconfig
2018-06-28 13:36:39 +09:00
socket.c
net: socket: set sock->sk to NULL after calling proto_ops::release()
2019-03-10 07:17:18 +01:00
sysctl_net.c
…