iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net
History
Eiichi Tsukata 472970a3b5 vsock: prevent unnecessary refcnt inc for nonblocking connect 
[ Upstream commit c7cd82b90599fa10915f41e3dd9098a77d0aa7b6 ]

Currently vosck_connect() increments sock refcount for nonblocking
socket each time it's called, which can lead to memory leak if
it's called multiple times because connect timeout function decrements
sock refcount only once.

Fixes it by making vsock_connect() return -EALREADY immediately when
sock state is already SS_CONNECTING.

Fixes: d021c344051a ("VSOCK: Introduce VM Sockets")
Reviewed-by: Stefano Garzarella <sgarzare@redhat.com>
Signed-off-by: Eiichi Tsukata <eiichi.tsukata@nutanix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-11-26 11:48:39 +01:00
..
6lowpan
6lowpan: Off by one handling ->nexthdr
2020-01-29 10:24:22 +01:00
9p
9p/trans_virtio: Remove sysfs file on probe failure
2021-09-26 13:36:18 +02:00
802
net/802/garp: fix memleak in garp_request_join()
2021-08-04 11:58:02 +02:00
8021q
vlan: fix memory leak in vlan_dev_set_egress_priority
2020-01-12 11:24:27 +01:00
appletalk
appletalk: Fix skb allocation size in loopback case
2021-04-07 12:05:39 +02:00
atm
atm: fix a memory leak of vcc->user_back
2020-10-01 20:40:12 +02:00
ax25
AX.25: Prevent integer overflows in connect and sendmsg
2020-07-31 16:44:06 +02:00
batman-adv
net: batman-adv: fix error handling
2021-11-02 17:39:23 +01:00
bluetooth
Bluetooth: fix use-after-free error in lock_sock_nested()
2021-11-26 11:48:27 +01:00
bridge
net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
2021-10-17 10:05:39 +02:00
caif
net-caif: avoid user-triggerable WARN_ON(1)
2021-09-22 11:43:09 +02:00
can
can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
2021-08-08 08:38:54 +02:00
ceph
libceph: clear con->out_msg on Policy::stateful_server faults
2020-11-10 10:23:59 +01:00
core
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
2021-11-26 11:48:34 +01:00
dcb
net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
2021-01-23 15:38:18 +01:00
dccp
dccp: don't duplicate ccid when cloning dccp sock
2021-09-22 11:43:09 +02:00
decnet
net: decnet: Fix sleeping inside in af_decnet
2021-07-28 09:14:27 +02:00
dns_resolver
KEYS: DNS: fix parsing multiple options
2018-07-22 14:27:39 +02:00
dsa
net: dsa: tag_brcm: Fix skb->fwd_offload_mark location
2020-04-13 10:32:53 +02:00
ethernet
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
hsr
hsr: use netdev_err() instead of WARN_ONCE()
2021-05-22 10:40:20 +02:00
ieee802154
net: Fix memory leak in ieee802154_raw_deliver
2021-08-26 08:37:22 -04:00
ipv4
net: udp: annotate data race around udp_sk(sk)->corkflag
2021-10-06 10:23:42 +02:00
ipv6
netfilter: ip6_tables: zero-initialize fragment offset
2021-10-17 10:05:40 +02:00
ipx
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda
irda: Only insert new objects into the global database via setsockopt
2018-09-15 09:43:01 +02:00
iucv
net/af_iucv: set correct sk_protocol for child sockets
2020-12-11 13:37:56 +01:00
kcm
kcm: switch order of device registration to fix a crash
2019-04-17 08:36:44 +02:00
key
af_key: relax availability checks for skb size calculation
2021-02-23 13:59:14 +01:00
l2tp
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
2021-09-22 11:43:09 +02:00
l3mdev
…
lapb
net: lapb: Copy the skb before sending a packet
2021-02-10 09:09:25 +01:00
llc
net: llc: fix skb_over_panic
2021-08-04 11:58:03 +02:00
mac80211
mac80211: Drop frames from invalid MAC address in ad-hoc mode
2021-10-17 10:05:40 +02:00
mac802154
net: mac802154: Fix general protection fault
2021-04-16 11:59:10 +02:00
mpls
net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
2021-03-17 16:10:13 +01:00
ncsi
net/ncsi: Use real net-device for response handler
2021-01-12 19:49:01 +01:00
netfilter
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
2021-11-26 11:48:38 +01:00
netlabel
net: fix NULL pointer reference in cipso_v4_doi_free
2021-09-22 11:43:08 +02:00
netlink
netlink: annotate data races around nlk->bound
2021-10-17 10:05:39 +02:00
netrom
netrom: Decrease sock refcount when sock timers expire
2021-07-28 09:14:27 +02:00
nfc
nfc: nci: fix the UAF of rf_conn_info object
2021-10-27 09:34:00 +02:00
openvswitch
openvswitch: fix stack OOB read while fragmenting IPv4 packets
2021-05-22 10:40:19 +02:00
packet
net/packet: annotate accesses to po->ifindex
2021-06-30 08:49:20 -04:00
phonet
phonet: fix building with clang
2019-03-23 13:19:44 +01:00
qrtr
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
2021-03-30 14:41:42 +02:00
rds
net/rds: dma_map_sg is entitled to merge entries
2021-09-03 09:44:40 +02:00
rfkill
rfkill: Fix incorrect check to avoid NULL pointer dereference
2020-01-12 11:24:23 +01:00
rose
rose: Fix Null pointer dereference in rose_send_frame()
2020-12-11 13:37:56 +01:00
rxrpc
rxrpc: Fix handling of an unsupported token type in rxrpc_read()
2021-01-23 15:38:19 +01:00
sched
net_sched: fix NULL deref in fifo_set_limit()
2021-10-17 10:05:39 +02:00
sctp
sctp: add vtag check in sctp_sf_violation
2021-11-02 17:39:23 +01:00
strparser
strparser: Fix incorrect strp->need_bytes value.
2018-04-29 11:32:02 +02:00
sunrpc
rpc: fix gss_svc_init cleanup on failure
2021-09-22 11:43:07 +02:00
switchdev
…
tipc
tipc: increase timeout in tipc_sk_enqueue()
2021-09-22 11:43:09 +02:00
unix
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
2021-10-09 13:25:58 +02:00
vmw_vsock
vsock: prevent unnecessary refcnt inc for nonblocking connect
2021-11-26 11:48:39 +01:00
wimax
…
wireless
cfg80211: Fix possible memory leak in function cfg80211_bss_update
2021-08-04 11:58:03 +02:00
x25
net/x25: Return the correct errno code
2021-06-30 08:49:12 -04:00
xfrm
xfrm: Fix error reporting in xfrm_state_construct.
2021-07-20 16:21:07 +02:00
compat.c
net: Return the correct errno code
2021-06-30 08:49:12 -04:00
Kconfig
…
Makefile
net: split out functions related to registering inflight socket files
2021-08-04 11:58:01 +02:00
socket.c
net: Set fput_needed iff FDPUT_FPUT is set
2020-08-21 11:02:04 +02:00
sysctl_net.c
…