Leon Romanovsky 94c115d138 xfrm: enforce validity of offload input flags ...

commit 7c76ecd9c9 upstream.

struct xfrm_user_offload has flags variable that received user input,
but kernel didn't check if valid bits were provided. It caused a situation
where not sanitized input was forwarded directly to the drivers.

For example, XFRM_OFFLOAD_IPV6 define that was exposed, was used by
strongswan, but not implemented in the kernel at all.

As a solution, check and sanitize input flags to forward
XFRM_OFFLOAD_INBOUND to the drivers.

Fixes: d77e38e612 ("xfrm: Add an IPsec hardware offloading API")
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-03-08 19:04:07 +01:00

..

Kconfig

ipsec: select crypto ciphers for xfrm_algo

2019-07-26 09:14:10 +02:00

Makefile

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_algo.c

xfrm: use IS_ENABLED() instead of checking for built-in or module

2016-09-10 21:19:11 -07:00

xfrm_device.c

xfrm: enforce validity of offload input flags

2022-03-08 19:04:07 +01:00

xfrm_hash.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_hash.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_input.c

xfrm: Fix oops in xfrm_replay_advance_bmp

2021-02-03 23:23:25 +01:00

xfrm_interface.c

xfrm: fix the if_id check in changelink

2022-03-08 19:04:07 +01:00

xfrm_ipcomp.c

net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()

2018-03-13 07:46:37 +01:00

xfrm_output.c

xfrm: fix a NULL-ptr deref in xfrm_local_error

2020-06-03 08:19:45 +02:00

xfrm_policy.c

xfrm: fix disable_xfrm sysctl when used on xfrm interfaces

2021-02-03 23:23:25 +01:00

xfrm_proc.c

proc: introduce proc_create_net_single

2018-05-16 07:24:30 +02:00

xfrm_replay.c

xfrm: Fix ESN sequence number handling for IPsec GSO packets.

2018-03-01 08:14:50 +01:00

xfrm_state.c

net: xfrm: Localize sequence counter per network namespace

2021-04-14 08:22:34 +02:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

xfrm: state and policy should fail if XFRMA_IF_ID 0

2022-01-27 09:04:19 +01:00