Steffen Klassert
09c810c77d
BACKPORT: esp: Fix possible buffer overflow in ESP transformation
...
commit ebe48d368e97d007bfeb76fcb065d6cfc4c96645 upstream.
The maximum message size that can be send is bigger than
the maximum site that skb_page_frag_refill can allocate.
So it is possible to write beyond the allocated buffer.
Fix this by doing a fallback to COW in that case.
v2:
Avoid get get_order() costs as suggested by Linus Torvalds.
Bug: 227452856
Fixes: cac2661c53 ("esp4: Avoid skb_cow_data whenever possible")
Fixes: 03e2a30f6a ("esp6: Avoid skb_cow_data whenever possible")
Reported-by: valis <sec@valis.email>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Tadeusz Struk <tadeusz.struk@linaro.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: I2c7f97914138271e7788adfcebbd0b2b8b43cdcb
Signed-off-by: Lee Jones <lee.jones@linaro.org>
2022-05-13 09:52:20 +01:00
..
6lowpan
9p
9p/net: fix missing error check in p9_check_errors
2021-11-17 09:48:49 +01:00
802
8021q
net: vlan: fix underflow for the real_dev refcnt
2021-12-01 09:23:34 +01:00
appletalk
atm
ax25
ax25: NPD bug when detaching AX25 device
2021-12-29 12:23:38 +01:00
batman-adv
batman-adv: allow netlink usage in unprivileged containers
2022-01-27 09:19:41 +01:00
bluetooth
Bluetooth: refactor malicious adv data check
2022-02-01 17:24:33 +01:00
bpf
bpfilter
bridge
net: bridge: fix stale eth hdr pointer in br_dev_xmit
2022-02-16 12:52:50 +01:00
caif
can
This is the 5.4.164 stable release
2021-12-08 09:19:28 +01:00
ceph
core
FROMGIT: net: fix wrong network header length
2022-05-09 16:01:57 +00:00
dcb
dccp
decnet
dns_resolver
dsa
ethernet
hsr
ieee802154
net: ieee802154: Return meaningful error codes from the netlink helpers
2022-02-08 18:24:31 +01:00
ife
ipv4
BACKPORT: esp: Fix possible buffer overflow in ESP transformation
2022-05-13 09:52:20 +01:00
ipv6
BACKPORT: esp: Fix possible buffer overflow in ESP transformation
2022-05-13 09:52:20 +01:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc
mac80211
This is the 5.4.174 stable release
2022-01-31 15:14:13 +01:00
mac802154
mpls
net: mpls: Fix notifications when deleting a device
2021-12-08 09:01:12 +01:00
ncsi
net/ncsi: check for error return from call to nla_put_u32
2022-01-05 12:37:45 +01:00
netfilter
This is the 5.4.176 stable release
2022-02-01 17:48:27 +01:00
netlabel
netlink
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
2021-12-17 10:12:23 +01:00
netrom
nfc
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
2022-01-27 09:19:26 +01:00
nsh
openvswitch
packet
BACKPORT: net/packet: fix slab-out-of-bounds access in packet_recvmsg()
2022-04-28 12:16:30 +00:00
phonet
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
psample
qrtr
rds
rds: memory leak in __rds_conn_create()
2021-12-22 09:29:37 +01:00
rfkill
rose
rxrpc
rxrpc: Adjust retransmission backoff
2022-02-01 17:24:38 +01:00
sched
This is the 5.4.180 stable release
2022-02-16 17:17:22 +01:00
sctp
Merge tag 'android11-5.4.180_r00' into android11-5.4
2022-03-21 12:44:03 +01:00
smc
net/smc: Prevent smc_release() from long blocking
2021-12-22 09:29:38 +01:00
strparser
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-17 09:48:48 +01:00
sunrpc
fsnotify: fix fsnotify hooks in pseudo filesystems
2022-02-01 17:24:34 +01:00
switchdev
net: switchdev: do not propagate bridge updates across bridges
2021-10-27 09:54:24 +02:00
tipc
tipc: rate limit warning for received illegal binding update
2022-02-16 12:52:51 +01:00
tls
net/tls: Fix authentication failure in CCM mode
2021-12-08 09:01:14 +01:00
unix
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
2022-01-27 09:19:53 +01:00
vmw_vsock
This is the 5.4.160 stable release
2021-11-17 10:19:21 +01:00
wimax
wireless
This is the 5.4.162 stable release
2021-11-26 11:38:38 +01:00
x25
xdp
Revert "xsk: Do not sleep in poll() when need_wakeup set"
2021-12-22 09:29:40 +01:00
xfrm
UPSTREAM: Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
2022-03-23 08:51:14 +01:00
compat.c
Kconfig
Makefile
OWNERS
socket.c
sysctl_net.c