Florian Westphal
ba4b40356a
netfilter: conntrack: don't refresh sctp entries in closed state ...
[ Upstream commit 77b337196a9d87f3d6bb9b07c0436ecafbffda1e ]
Vivek Thrivikraman reported:
An SCTP server application which is accessed continuously by client
application.
When the session disconnects the client retries to establish a connection.
After restart of SCTP server application the session is not established
because of stale conntrack entry with connection state CLOSED as below.
(removing this entry manually established new connection):
sctp 9 CLOSED src=10.141.189.233 [..] [ASSURED]
Just skip timeout update of closed entries, we don't want them to
stay around forever.
Reported-and-tested-by: Vivek Thrivikraman <vivek.thrivikraman@est.tech>
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1579
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-02-23 12:00:00 +01:00
9p/net: fix missing error check in p9_check_errors
2021-11-17 09:48:49 +01:00
net: vlan: fix underflow for the real_dev refcnt
2021-12-01 09:23:34 +01:00
ax25: improve the incomplete fix to avoid UAF and NPD bugs
2022-02-23 11:59:55 +01:00
batman-adv: allow netlink usage in unprivileged containers
2022-01-27 09:19:41 +01:00
Bluetooth: refactor malicious adv data check
2022-02-01 17:24:33 +01:00
net: bridge: fix stale eth hdr pointer in br_dev_xmit
2022-02-16 12:52:50 +01:00
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
2021-12-08 09:01:08 +01:00
drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
2022-02-23 11:59:58 +01:00
net: ieee802154: Return meaningful error codes from the netlink helpers
2022-02-08 18:24:31 +01:00
ping: fix the dif and sdif check in ping_lookup
2022-02-23 11:59:58 +01:00
ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
2022-02-16 12:52:51 +01:00
mac80211: allow non-standard VHT MCS-10/11
2022-01-27 09:19:46 +01:00
net: mpls: Fix notifications when deleting a device
2021-12-08 09:01:12 +01:00
net/ncsi: check for error return from call to nla_put_u32
2022-01-05 12:37:45 +01:00
netfilter: conntrack: don't refresh sctp entries in closed state
2022-02-23 12:00:00 +01:00
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
2021-12-17 10:12:23 +01:00
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
2022-01-27 09:19:26 +01:00
af_packet: fix data-race in packet_setsockopt / packet_setsockopt
2022-02-05 12:35:37 +01:00
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
rds: memory leak in __rds_conn_create()
2021-12-22 09:29:37 +01:00
rxrpc: Adjust retransmission backoff
2022-02-01 17:24:38 +01:00
net: sched: limit TC_ACT_REPEAT loops
2022-02-23 11:59:59 +01:00
sctp: use call_rcu to free endpoint
2022-01-05 12:37:44 +01:00
net/smc: Prevent smc_release() from long blocking
2021-12-22 09:29:38 +01:00
fsnotify: fix fsnotify hooks in pseudo filesystems
2022-02-01 17:24:34 +01:00
tipc: rate limit warning for received illegal binding update
2022-02-16 12:52:51 +01:00
net/tls: Fix authentication failure in CCM mode
2021-12-08 09:01:14 +01:00
af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress
2022-01-27 09:19:53 +01:00
vsock: remove vsock from connected table when connect is interrupted by a signal
2022-02-23 11:59:57 +01:00
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
2021-11-26 10:47:22 +01:00
Revert "xsk: Do not sleep in poll() when need_wakeup set"
2021-12-22 09:29:40 +01:00
xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
2022-01-27 09:19:54 +01:00
ba4b40356a