Paolo Abeni e889eb17f4 netfilter pull request 24-05-29 ... -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEN9lkrMBJgcdVAPub1V2XiooUIOQFAmZWXboACgkQ1V2XiooU IOQW/BAAld3NcyYFzwhUmiAcig7jvYkIZwGE7wBVPz82G+gC4n8k+cIt50XlhTQt lctjKHI7y96hWqlAPbu96lRn/KFgFCCRF3sACpJ/rR5rLn+hLBgIiXKZohLoAkkA zoSfpHXQo8u8tGmdNJiweKNZbJWXj4Wmaj3SLqbf/0mMyIQUigZ+4EHDHWGP8JvQ 6ilcEndEy9IBD3M5jIE3ubPwbrXwBQjaGRgT+e7yLgNDP8FEg3IeWcPW5hMtPEW3 mizkxamzdNzhaBH2U33hKvoQv0q9QmtcBa8angvx9OCEDRa9c/RpfIYwj8SsdQW1 kdzSAMNpYho+lRmq708G02vYQya5+wfof9NlJHrRqPj4BwFpj53sGm11ksfrYkId WSJj4WAAcv4zNavS3jQD8SeGrA7bxyvyfO6JUSTEThyMYWvN0s8erGNZYa3Mk1AD PH3WqMp8WV6EtG4+jQymvLcJ6HrzncdNeBdmbvVhGa9xPGaDIQFs3c4WRRjRu9jd 0cPPITOtb0cOGbt/w9jK1ot7wcm00uwQ1xcFlJO88I7dkgqHxYEsQ8gUC+cJoqL6 s2oPVKMvYzJnyhkXumP1/w3hqkk9EJq5pZZiu47UHbtfT3HhQRBPNydwTvB3Mj30 X8rczN2sFFcDp1KkMQF6C8tQZSXIEEAf5XTUm+q69MmuiT0lrn8= =cexP -----END PGP SIGNATURE----- Merge tag 'nf-24-05-29' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf Pablo Neira Ayuso says: ==================== Netfilter fixes for net The following patchset contains Netfilter fixes for net: Patch #1 syzbot reports that nf_reinject() could be called without rcu_read_lock() when flushing pending packets at nfnetlink queue removal, from Eric Dumazet. Patch #2 flushes ipset list:set when canceling garbage collection to reference to other lists to fix a race, from Jozsef Kadlecsik. Patch #3 restores q-in-q matching with nft_payload by reverting f6ae9f120d ("netfilter: nft_payload: add C-VLAN support"). Patch #4 fixes vlan mangling in skbuff when vlan offload is present in skbuff, without this patch nft_payload corrupts packets in this case. Patch #5 fixes possible nul-deref in tproxy no IP address is found in netdevice, reported by syzbot and patch from Florian Westphal. Patch #6 removes a superfluous restriction which prevents loose fib lookups from input and forward hooks, from Eric Garver. My assessment is that patches #1, #2 and #5 address possible kernel crash, anything else in this batch fixes broken features. netfilter pull request 24-05-29 * tag 'nf-24-05-29' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf: netfilter: nft_fib: allow from forward/input without iif selector netfilter: tproxy: bail out if IP has been disabled on the device netfilter: nft_payload: skbuff vlan metadata mangle support netfilter: nft_payload: restore vlan q-in-q match support netfilter: ipset: Add list flush to cancel_gc netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() ==================== Link: https://lore.kernel.org/r/20240528225519.1155786-1-pablo@netfilter.org Signed-off-by: Paolo Abeni <pabeni@redhat.com>		2024-05-30 10:14:56 +02:00
..
netfilter	netfilter: tproxy: bail out if IP has been disabled on the device	2024-05-29 00:37:51 +02:00
af_inet.c	net: gro: initialize network_offset in network layer	2024-05-27 16:46:59 -07:00
ah4.c	net: fill in MODULE_DESCRIPTION()s for ipv4 modules	2024-02-09 14:12:02 -08:00
arp.c	arp: Convert ioctl(SIOCGARP) to RCU.	2024-05-01 18:37:07 -07:00
bpf_tcp_ca.c	bpf: tcp: Allow to write tp->snd_cwnd_stamp in bpf_tcp_ca	2024-05-02 16:26:56 -07:00
cipso_ipv4.c	netlabel: fix RCU annotation for IPv4 options on socket creation	2024-05-13 14:58:12 -07:00
datagram.c	ipv4: Set the routing scope properly in ip_route_output_ports().	2024-02-12 17:33:05 -08:00
devinet.c	ipv4: correctly iterate over the target netns in inet_dump_ifaddr()	2024-05-29 18:43:42 -07:00
esp4_offload.c	xfrm: Support GRO for IPv4 ESP in UDP encapsulation	2023-10-06 07:30:40 +02:00
esp4.c	ipsec-next-2024-05-03	2024-05-06 19:14:56 -07:00
fib_frontend.c	inet: bring NLM_DONE out to a separate recv() again	2024-04-15 10:25:27 +01:00
fib_lookup.h
fib_notifier.c
fib_rules.c	fib: remove unnecessary input parameters in fib_default_rule_add	2024-01-03 16:42:48 -08:00
fib_semantics.c	net: add two more call_rcu_hurry()	2024-04-25 15:24:23 -07:00
fib_trie.c	inet: switch inet_dump_fib() to RCU protection	2024-02-26 11:46:13 +00:00
fou_bpf.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
fou_core.c	net: gro: rename skb_gro_header_hard()	2024-03-05 13:30:11 +01:00
fou_nl.c
fou_nl.h
gre_demux.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
gre_offload.c	net: gro: rename skb_gro_header_hard()	2024-03-05 13:30:11 +01:00
icmp.c	net/ipv4: add tracepoint for icmp_send	2024-05-08 10:39:26 +01:00
igmp.c	ipv4: Set scope explicitly in ip_route_output().	2024-04-08 13:20:51 +01:00
inet_connection_sock.c	net: pass back whether socket was empty post accept	2024-05-13 18:19:20 -06:00
inet_diag.c	inet_diag: skip over empty buckets	2024-01-23 15:13:55 +01:00
inet_fragment.c	inet: frags: delay fqdir_free_fn()	2024-04-08 10:59:56 +01:00
inet_hashtables.c	tcp: get rid of twsk_unique()	2024-05-09 20:25:55 -07:00
inet_timewait_sock.c	tcp/dccp: do not care about families in inet_twsk_purge()	2024-04-01 21:27:58 -07:00
inetpeer.c	net: ipv4: Simplify the allocation of slab caches in inet_initpeers	2024-01-31 16:39:42 -08:00
ip_forward.c	net: fix IPSTATS_MIB_OUTFORWDATAGRAMS increment after fragment check	2023-10-13 09:58:45 -07:00
ip_fragment.c	net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array	2024-05-03 13:29:42 +01:00
ip_gre.c	net: annotate writes on dev->mtu from ndo_change_mtu()	2024-05-07 16:19:14 -07:00
ip_input.c	inet: introduce dst_rtable() helper	2024-04-30 18:32:38 -07:00
ip_options.c
ip_output.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2024-05-02 12:06:25 -07:00
ip_sockglue.c	inet: Add getsockopt support for IP_ROUTER_ALERT and IPV6_ROUTER_ALERT	2024-03-06 12:37:06 +00:00
ip_tunnel_core.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
ip_tunnel.c	net: annotate writes on dev->mtu from ndo_change_mtu()	2024-05-07 16:19:14 -07:00
ip_vti.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
ipcomp.c
ipconfig.c
ipip.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
ipmr_base.c
ipmr.c	ip_tunnel: use a separate struct to store tunnel params in the kernel	2024-04-01 10:49:28 +01:00
Kconfig	net/tcp: Add TCP-AO config and structures	2023-10-27 10:35:44 +01:00
Makefile	bpfilter: remove bpfilter	2024-01-04 10:23:10 -08:00
metrics.c
netfilter.c	xfrm: pass struct net to xfrm_decode_session wrappers	2023-10-06 08:31:53 +02:00
netlink.c
nexthop.c	nexthop: fix uninitialized variable in nla_put_nh_group_stats()	2024-03-22 18:03:29 -07:00
ping.c	bpf-next-for-netdev	2023-10-16 21:05:33 -07:00
proc.c	net: add <net/proto_memory.h>	2024-04-30 18:46:52 -07:00
protocol.c
raw_diag.c	inet_diag: add module pointer to "struct inet_diag_handler"	2024-01-23 15:13:54 +01:00
raw.c	ipv4: Fix uninit-value access in __ip_make_skb()	2024-05-02 10:16:35 +02:00
route.c	net: fix __dst_negative_advice() race	2024-05-29 17:34:49 -07:00
syncookies.c	tcp: annotate data-races around tp->window_clamp	2024-04-05 22:32:37 -07:00
sysctl_net_ipv4.c	net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array	2024-05-03 13:29:42 +01:00
tcp_ao.c	tcp: Fix Use-After-Free in tcp_ao_connect_init	2024-04-23 19:06:39 -07:00
tcp_bbr.c	tcp: Add new args for cong_control in tcp_congestion_ops	2024-05-02 16:26:56 -07:00
tcp_bic.c
tcp_bpf.c	tcp_bpf: properly release resources on error paths	2023-10-18 18:09:31 -07:00
tcp_cdg.c
tcp_cong.c	bpf, net: validate struct_ops when updating value.	2024-03-04 10:03:57 -08:00
tcp_cubic.c	bpf: Remove CONFIG_X86 and CONFIG_DYNAMIC_FTRACE guard from the tcp-cc kfuncs	2024-03-28 18:31:40 -07:00
tcp_dctcp.c	tcp: Fix shift-out-of-bounds in dctcp_update_alpha().	2024-05-21 13:34:50 +02:00
tcp_dctcp.h
tcp_diag.c	inet_diag: add module pointer to "struct inet_diag_handler"	2024-01-23 15:13:54 +01:00
tcp_fastopen.c	inet: move inet->defer_connect to inet->inet_flags	2023-08-16 11:09:18 +01:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	bpf-next-for-netdev	2024-05-13 16:41:10 -07:00
tcp_ipv4.c	tcp: reduce accepted window in NEW_SYN_RECV state	2024-05-27 16:47:23 -07:00
tcp_lp.c	tcp: rename tcp_time_stamp() to tcp_time_stamp_ts()	2023-10-23 09:35:01 +01:00
tcp_metrics.c	tcp_metrics: use parallel_ops for tcp_metrics_nl_family	2024-04-17 18:31:53 -07:00
tcp_minisocks.c	tcp: reduce accepted window in NEW_SYN_RECV state	2024-05-27 16:47:23 -07:00
tcp_nv.c
tcp_offload.c	net: gro: move L3 flush checks to tcp_gro_receive and udp_gro_receive_segment	2024-05-13 14:44:06 -07:00
tcp_output.c	tcp: remove 64 KByte limit for initial tp->rcv_wnd value	2024-05-23 12:21:17 +02:00
tcp_plb.c
tcp_rate.c
tcp_recovery.c	tcp: fix excessive TLP and RACK timeouts from HZ rounding	2023-10-17 17:25:42 -07:00
tcp_scalable.c
tcp_sigpool.c	net/tcp_sigpool: Use kref_get_unless_zero()	2024-01-01 14:42:05 +00:00
tcp_timer.c	rstreason: prepare for active reset	2024-04-26 15:34:00 +02:00
tcp_ulp.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tcp.c	tcp: socket option to check for MPTCP fallback to TCP	2024-05-13 14:48:04 -07:00
tunnel4.c	net: fill in MODULE_DESCRIPTION()s for ipv4 modules	2024-02-09 14:12:02 -08:00
udp_bpf.c
udp_diag.c	inet_diag: add module pointer to "struct inet_diag_handler"	2024-01-23 15:13:54 +01:00
udp_impl.h	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
udp_offload.c	net: gro: move L3 flush checks to tcp_gro_receive and udp_gro_receive_segment	2024-05-13 14:44:06 -07:00
udp_tunnel_core.c	ip_tunnel: convert __be16 tunnel flags to bitmaps	2024-04-01 10:49:28 +01:00
udp_tunnel_nic.c	udp_tunnel: Use flex array to simplify code	2023-10-03 11:39:34 +02:00
udp_tunnel_stub.c
udp.c	ipsec-next-2024-05-03	2024-05-06 19:14:56 -07:00
udplite.c	udplite: remove UDPLITE_BIT	2023-09-14 16:16:36 +02:00
xfrm4_input.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2024-05-09 10:01:01 -07:00
xfrm4_output.c
xfrm4_policy.c	net: ipv{6,4}: Remove the now superfluous sentinel elements from ctl_table array	2024-05-03 13:29:42 +01:00
xfrm4_protocol.c
xfrm4_state.c
xfrm4_tunnel.c	net: fill in MODULE_DESCRIPTION()s for ipv4 modules	2024-02-09 14:12:02 -08:00