Rao Shoaib
a3842219a6
RDS tcp loopback connection can hang ...
[ Upstream commit aced3ce57cd37b5ca332bcacd370d01f5a8c5371 ]
When TCP is used as transport and a program on the
system connects to RDS port 16385, connection is
accepted but denied per the rules of RDS. However,
RDS connections object is left in the list. Next
loopback connection will select that connection
object as it is at the head of list. The connection
attempt will hang as the connection object is set
to connect over TCP which is not allowed
The issue can be reproduced easily, use rds-ping
to ping a local IP address. After that use any
program like ncat to connect to the same IP
address and port 16385. This will hang so ctrl-c out.
Now try rds-ping, it will hang.
To fix the issue this patch adds checks to disallow
the connection object creation and destroys the
connection object.
Signed-off-by: Rao Shoaib <rao.shoaib@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-06-16 11:59:35 +02:00
net: vlan: avoid leaks on register_vlan_dev() failures
2021-01-17 14:05:31 +01:00
appletalk: Fix skb allocation size in loopback case
2021-04-07 14:47:41 +02:00
batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
2021-04-14 08:24:11 +02:00
Bluetooth: use correct lock to prevent UAF of hdev object
2021-06-10 13:37:09 +02:00
bridge: Fix possible races between assigning rx_handler_data and setting IFF_BRIDGE_PORT bit
2021-05-22 11:38:29 +02:00
net: caif: fix memory leak in cfusbl_device_notify
2021-06-10 13:37:10 +02:00
can: bcm/raw: fix msg_namelen values depending on CAN_REQUIRED_SIZE
2021-04-14 08:24:14 +02:00
neighbour: allow NUD_NOARP entries to be forced GCed
2021-06-10 13:37:16 +02:00
net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
2021-01-23 15:57:59 +01:00
ipv6: weaken the v4mapped source check
2021-04-07 14:47:38 +02:00
net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
2021-06-03 08:59:12 +02:00
hsr: use netdev_err() instead of WARN_ONCE()
2021-05-14 09:44:10 +02:00
ieee802154: fix error return code in ieee802154_llsec_getparams()
2021-06-10 13:37:05 +02:00
net: Only allow init netns to set default tcp cong to a restricted algo
2021-05-14 09:44:33 +02:00
ipv6: Fix KASAN: slab-out-of-bounds Read in fib6_nh_flush_exceptions
2021-06-10 13:37:05 +02:00
net/af_iucv: remove WARN_ONCE on malformed RX packets
2021-03-07 12:20:42 +01:00
af_key: relax availability checks for skb size calculation
2021-02-13 13:52:54 +01:00
net: lapb: Copy the skb before sending a packet
2021-02-10 09:25:28 +01:00
mac80211: extend protection against mixed key and fragment cache attacks
2021-06-03 08:59:02 +02:00
net: mac802154: Fix general protection fault
2021-04-14 08:24:18 +02:00
net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
2021-03-17 17:03:31 +01:00
net/ncsi: Avoid channel_monitor hrtimer deadlock
2021-04-14 08:24:15 +02:00
netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
2021-06-10 13:37:05 +02:00
cipso,calipso: resolve a number of problems with the DOI refcounts
2021-03-17 17:03:35 +01:00
netlink: disable IRQs for netlink_lock_table()
2021-06-16 11:59:34 +02:00
net/nfc/rawsock.c: fix a permission check bug
2021-06-16 11:59:33 +02:00
openvswitch: meter: fix race when getting now_ms.
2021-06-03 08:59:13 +02:00
net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
2021-03-30 14:35:29 +02:00
RDS tcp loopback connection can hang
2021-06-16 11:59:35 +02:00
rose: Fix Null pointer dereference in rose_send_frame()
2020-12-08 10:40:23 +01:00
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
2021-02-17 10:35:18 +01:00
net/sched: act_ct: Fix ct template allocation for zone 0
2021-06-10 13:37:04 +02:00
sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
2021-05-19 10:08:27 +02:00
Revert "net/smc: fix a NULL pointer dereference"
2021-06-03 08:59:08 +02:00
sunrpc: Fix misplaced barrier in call_decode
2021-05-19 10:08:27 +02:00
net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP
2021-02-07 15:35:46 +01:00
tipc: fix unique bearer names sanity check
2021-06-10 13:37:08 +02:00
tls splice: check SPLICE_F_NONBLOCK instead of MSG_DONTWAIT
2021-06-03 08:59:13 +02:00
vsock/vmci: log once the failed queue pair allocation
2021-05-14 09:44:30 +02:00
nl80211: validate key indexes for cfg80211_registered_device
2021-06-10 13:37:02 +02:00
net/x25: prevent a couple of overflows
2020-12-08 10:40:26 +01:00
xsk: Simplify detection of empty and full rings
2021-05-22 11:38:27 +02:00
net: xfrm: Localize sequence counter per network namespace
2021-04-14 08:24:13 +02:00
a3842219a6