Phil Sutter
73bfa95eeb
UPSTREAM: netfilter: nf_tables: Reject tables of unsupported family
...
commit f1082dd31fe461d482d69da2a8eccfeb7bf07ac2 upstream.
An nftables family is merely a hollow container, its family just a
number and such not reliant on compile-time options other than nftables
support itself. Add an artificial check so attempts at using a family
the kernel can't support fail as early as possible. This helps user
space detect kernels which lack e.g. NFPROTO_INET.
Bug: 321815738
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 25d1e7be85cf0a5afca5555f90e4609c40480ece)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I45b5c6f046e9156edf4c60bf5611367fe25f8ec9
2024-02-01 10:59:53 +00:00
..
6lowpan
9p
9p: virtio: make sure 'offs' is initialized in zc_request
2023-09-23 10:59:37 +02:00
802
8021q
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
2023-05-30 12:44:06 +01:00
appletalk
appletalk: Fix Use-After-Free in atalk_ioctl
2023-12-20 15:41:18 +01:00
atm
atm: Fix Use-After-Free in do_vcc_ioctl
2023-12-20 15:41:15 +01:00
ax25
batman-adv
batman-adv: Hold rtnl lock during MTU update via netlink
2023-08-30 16:27:25 +02:00
bluetooth
This is the 5.4.262 stable release
2023-11-29 10:18:14 +00:00
bpf
bpfilter
bridge
This is the 5.4.262 stable release
2023-11-29 10:18:14 +00:00
caif
This is the 5.4.237 stable release
2023-03-22 10:04:49 +00:00
can
This is the 5.4.251 stable release
2023-08-03 10:56:28 +00:00
ceph
libceph: use kernel_connect()
2023-10-25 11:53:19 +02:00
core
Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group"
2023-12-18 19:08:30 +00:00
dcb
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-11 11:53:57 +02:00
dccp
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
2023-11-20 10:30:15 +01:00
decnet
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
dns_resolver
dsa
net: dsa: tag_sja1105: fix MAC DA patching from meta frames
2023-07-27 08:37:24 +02:00
ethernet
hsr
ieee802154
ife
ipv4
This is the 5.4.265 stable release
2023-12-21 12:17:30 +00:00
ipv6
This is the 5.4.265 stable release
2023-12-21 12:17:30 +00:00
iucv
treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()
2023-04-20 12:07:32 +02:00
kcm
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
2023-09-23 11:00:02 +02:00
key
net: af_key: fix sadb_x_filter validation
2023-08-30 16:27:16 +02:00
l2tp
ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
2023-10-10 21:46:44 +02:00
l3mdev
lapb
llc
llc: verify mac len before reading mac header
2023-11-20 10:30:15 +01:00
mac80211
This is the 5.4.262 stable release
2023-11-29 10:18:14 +00:00
mac802154
mpls
net: mpls: fix stale pointer if allocation fails during device rename
2023-02-22 12:50:41 +01:00
ncsi
Revert ncsi: Propagate carrier gain/loss events to the NCSI controller
2023-11-28 16:50:21 +00:00
netfilter
UPSTREAM: netfilter: nf_tables: Reject tables of unsupported family
2024-02-01 10:59:53 +00:00
netlabel
netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
2023-09-23 10:59:39 +02:00
netlink
Revert "genetlink: add CAP_NET_ADMIN test for multicast bind"
2023-12-18 19:11:33 +00:00
netrom
netrom: Deny concurrent connect().
2023-09-23 10:59:43 +02:00
nfc
nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
2023-10-25 11:53:20 +02:00
nsh
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
2023-05-30 12:44:05 +01:00
openvswitch
packet
This is the 5.4.264 stable release
2023-12-14 13:03:30 +00:00
phonet
psample
Revert "psample: Require 'CAP_NET_ADMIN' when joining "packets" group"
2023-12-18 20:13:34 +00:00
qrtr
rds
net: prevent address rewrite in kernel_bind()
2023-10-25 11:53:18 +02:00
rfkill
net: rfkill: gpio: prevent value glitch during probe
2023-10-25 11:53:21 +02:00
rose
net/rose: Fix Use-After-Free in rose_ioctl
2023-12-20 15:41:16 +01:00
rxrpc
rxrpc: Fix hard call timeout units
2023-05-17 11:35:59 +02:00
sched
Merge 5.4.259 into android11-5.4-lts
2023-10-26 09:18:00 +00:00
sctp
Merge 5.4.258 into android11-5.4-lts
2023-10-26 06:14:23 +00:00
smc
net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
2023-11-20 10:30:16 +01:00
strparser
sunrpc
SUNRPC: Mark the cred for revalidation if the server rejects it
2023-10-10 21:46:35 +02:00
switchdev
tipc
This is the 5.4.262 stable release
2023-11-29 10:18:14 +00:00
tls
net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
2023-09-23 11:00:02 +02:00
unix
af_unix: Fix data-race around unix_tot_inflight.
2023-09-23 10:59:58 +02:00
vmw_vsock
This is the 5.4.265 stable release
2023-12-21 12:17:30 +00:00
wimax
wireless
Merge 5.4.259 into android11-5.4-lts
2023-10-26 09:18:00 +00:00
x25
xdp
xsk: Honor SO_BINDTODEVICE on bind
2023-07-27 08:37:23 +02:00
xfrm
Revert "xfrm: fix a data-race in xfrm_gen_index()"
2023-10-26 10:18:46 +00:00
compat.c
Kconfig
Merge 5.4.248 into android11-5.4-lts
2023-06-22 16:16:24 +00:00
Makefile
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
OWNERS
socket.c
Merge 5.4.259 into android11-5.4-lts
2023-10-26 09:18:00 +00:00
sysctl_net.c
TEST_MAPPING