Pablo Neira Ayuso
23752737c6
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers ...
[ Upstream commit 7931d32955e09d0a11b1fe0b6aac1bfa061c005c ]
register store validation for NFT_DATA_VALUE is conditional, however,
the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This
only requires a new helper function to infer the register type from the
set datatype so this conditional check can be removed. Otherwise,
pointer to chain object can be leaked through the registers.
Fixes: 96518518cc
2024-07-05 09:08:27 +02:00
Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
2024-07-05 09:08:17 +02:00
netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
2024-07-05 09:08:27 +02:00
ipv6: make ip6_rt_gc_expire an atomic_t
2024-01-15 18:25:29 +01:00
nfc: constify several pointers to u8, char and sk_buff
2023-07-27 08:37:07 +02:00
sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop
2023-03-11 16:44:11 +01:00
net/sched: act_pedit: really ensure the skb is writable
2022-05-18 09:47:25 +02:00
ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
2024-05-02 16:18:28 +02:00
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
2024-05-02 16:18:35 +02:00
ax25: fix reference count leaks of ax25_dev
2022-04-20 09:19:39 +02:00
bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
2023-06-14 10:59:58 +02:00
bonding: fix macvlan over alb bond support
2023-08-30 16:27:24 +02:00
net: Fix a data-race around sysctl_net_busy_poll.
2022-09-05 10:27:42 +02:00
wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
2023-08-16 18:19:24 +02:00
net: Remove unused inline function dst_hold_and_use()
2023-06-21 15:44:12 +02:00
net: fix __dst_negative_advice() race
2024-06-16 13:28:52 +02:00
erspan: Add type I version 0 support.
2024-04-13 12:51:36 +02:00
esp: limit skb_page_frag_refill use to a single page
2022-07-12 16:30:45 +02:00
inet: shrink struct flowi_common
2023-11-20 10:30:15 +01:00
drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group
2023-12-13 18:18:17 +01:00
net: ieee802154: return -EINVAL for unknown addr type
2022-10-26 13:22:59 +02:00
net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX
2023-12-20 15:41:13 +01:00
tcp: properly terminate timers for kernel sockets
2024-04-13 12:51:33 +02:00
secure_seq: use the 64 bits of the siphash for port offset calculation
2022-06-06 08:33:49 +02:00
tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept.
2022-07-29 17:14:11 +02:00
ipv{4,6}/raw: fix output xfrm lookup wrt protocol
2023-06-05 08:17:33 +02:00
ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
2023-05-30 12:44:05 +01:00
geneve: fix header validation in geneve[6]_xmit_skb
2024-05-02 16:18:28 +02:00
tcp: Reduce chance of collisions in inet6_hashfn().
2023-08-11 11:53:47 +02:00
llc: Drop support for ETH_P_TR_802_2.
2024-02-23 08:24:50 +01:00
lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
2023-09-23 10:59:42 +02:00
mrp: introduce active flags to prevent UAF when applicant uninit
2023-01-18 11:41:37 +01:00
neighbour: delete neigh_lookup_nodev as not used
2023-06-21 15:44:12 +02:00
net/sched: make psched_mtu() RTNL-less safe
2023-07-27 08:37:33 +02:00
tcp/udp: Make early_demux back namespacified.
2022-11-10 17:57:55 +01:00
raw: Fix a data-race around sysctl_raw_l3mdev_accept.
2022-07-21 20:59:22 +02:00
net: validate veth and vxcan peer ifindexes
2023-08-30 16:27:24 +02:00
net/sched: sch_taprio: fix possible use-after-free
2023-02-06 07:52:37 +01:00
scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
2023-05-17 11:35:41 +02:00
secure_seq: use the 64 bits of the siphash for port offset calculation
2022-06-06 08:33:49 +02:00
net: fix __dst_negative_advice() race
2024-06-16 13:28:52 +02:00
tcp: factor out __tcp_close() helper
2024-03-01 13:13:34 +01:00
tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
2023-04-26 11:24:05 +02:00
tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().
2023-04-26 11:24:05 +02:00
vxlan: calculate correct header length for GPE
2023-08-11 11:53:47 +02:00
xfrm: Preserve vlan tags for transport mode software GRO
2024-05-17 11:43:53 +02:00
23752737c6