Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Florian Westphal 10f0af5234 netfilter: tproxy: bail out if IP has been disabled on the device ... [ Upstream commit 21a673bddc8fd4873c370caf9ae70ffc6d47e8d3 ] syzbot reports: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [..] RIP: 0010:nf_tproxy_laddr4+0xb7/0x340 net/ipv4/netfilter/nf_tproxy_ipv4.c:62 Call Trace: nft_tproxy_eval_v4 net/netfilter/nft_tproxy.c:56 [inline] nft_tproxy_eval+0xa9a/0x1a00 net/netfilter/nft_tproxy.c:168 __in_dev_get_rcu() can return NULL, so check for this. Reported-and-tested-by: syzbot+b94a6818504ea90d7661@syzkaller.appspotmail.com Fixes: cc6eb43385 ("tproxy: use the interface primary IP address as a default value for --on-ip") Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-06-16 13:28:47 +02:00
..
bpfilter
netfilter	netfilter: tproxy: bail out if IP has been disabled on the device	2024-06-16 13:28:47 +02:00
af_inet.c	tcp: add annotations around sk->sk_shutdown accesses	2024-03-01 13:13:34 +01:00
ah4.c
arp.c	ipv4: Invalidate neighbour for broadcast address upon address addition	2022-04-15 14:18:33 +02:00
cipso_ipv4.c	cipso: Fix data-races around sysctl.	2022-07-21 20:59:20 +02:00
datagram.c
devinet.c	ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid	2024-03-01 13:13:37 +01:00
esp4.c	net: ipv4: fix return value check in esp_remove_trailer	2023-10-25 11:53:21 +02:00
esp4_offload.c	xfrm: Linearize the skb after offloading if needed.	2023-06-28 10:18:38 +02:00
fib_frontend.c	ipv4: Fix incorrect table ID in IOCTL path	2023-03-22 13:28:06 +01:00
fib_lookup.h
fib_notifier.c
fib_rules.c
fib_semantics.c	ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr	2023-10-25 11:53:21 +02:00
fib_trie.c	ipv4: annotate data-races around fi->fib_dead	2023-09-23 10:59:58 +02:00
fou.c
gre_demux.c
gre_offload.c
icmp.c	icmp: guard against too small mtu	2023-04-20 12:07:33 +02:00
igmp.c	ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet	2023-12-08 08:44:27 +01:00
inet_connection_sock.c	tcp: properly terminate timers for kernel sockets	2024-04-13 12:51:33 +02:00
inet_diag.c
inet_fragment.c	inet: frags: annotate races around fqdir->dead and fqdir->high_thresh	2022-01-27 09:19:54 +01:00
inet_hashtables.c	Revert "tcp: avoid the lookup process failing to get sk in ehash table"	2023-07-27 08:37:44 +02:00
inet_timewait_sock.c	tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()	2024-05-02 16:18:37 +02:00
inetpeer.c	inetpeer: Fix data-races around sysctl.	2022-07-21 20:59:20 +02:00
ip_forward.c
ip_fragment.c	inet: frags: annotate races around fqdir->dead and fqdir->high_thresh	2022-01-27 09:19:54 +01:00
ip_gre.c	ip_gre: do not report erspan version on GRE interface	2024-04-13 12:51:40 +02:00
ip_input.c	tcp/udp: Make early_demux back namespacified.	2022-11-10 17:57:55 +01:00
ip_options.c
ip_output.c	net: ipv4: fix a memleak in ip_setup_cork	2024-02-23 08:25:05 +01:00
ip_sockglue.c	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 08:17:33 +02:00
ip_tunnel.c	net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()	2024-03-26 18:22:17 -04:00
ip_tunnel_core.c
ip_vti.c	ip_vti: fix potential slab-use-after-free in decode_session6	2023-08-30 16:27:16 +02:00
ipcomp.c
ipconfig.c
ipip.c
ipmr.c	ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path	2022-02-16 12:52:51 +01:00
ipmr_base.c
Kconfig	tcp: configurable source port perturb table size	2022-12-08 11:23:00 +01:00
Makefile
metrics.c	ipv4: prevent potential spectre v1 gadget in ip_metrics_convert()	2023-02-06 07:52:45 +01:00
netfilter.c
netlink.c
nexthop.c	nh: fix scope used to find saddr when adding non gw nh	2022-11-03 23:56:56 +09:00
ping.c	ping: fix address binding wrt vrf	2022-05-18 09:47:28 +02:00
proc.c
protocol.c
raw.c	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 08:17:33 +02:00
raw_diag.c
route.c	ipv4/route: avoid unused-but-set-variable warning	2024-05-02 16:18:28 +02:00
syncookies.c	tcp: fix cookie_init_timestamp() overflows	2023-11-20 10:30:10 +01:00
sysctl_net_ipv4.c	tcp/udp: Make early_demux back namespacified.	2022-11-10 17:57:55 +01:00
tcp.c	tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets	2024-05-17 11:43:53 +02:00
tcp_bbr.c
tcp_bic.c
tcp_bpf.c	bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect	2023-01-18 11:41:08 +01:00
tcp_cdg.c	tcp: cdg: allow tcp_cdg_release() to be called multiple times	2022-11-25 17:42:21 +01:00
tcp_cong.c
tcp_cubic.c
tcp_dctcp.c	tcp: Fix shift-out-of-bounds in dctcp_update_alpha().	2024-06-16 13:28:45 +02:00
tcp_dctcp.h
tcp_diag.c
tcp_fastopen.c	tcp: annotate data-races around fastopenq.max_qlen	2023-07-27 08:37:45 +02:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c	tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets	2024-05-17 11:43:53 +02:00
tcp_ipv4.c	tcp: avoid premature drops in tcp_add_backlog()	2024-06-16 13:28:35 +02:00
tcp_lp.c
tcp_metrics.c	tcp_metrics: do not create an entry from tcp_init_metrics()	2023-11-20 10:30:09 +01:00
tcp_minisocks.c	tcp: tcp_check_req() can be called from process context	2023-03-11 16:44:12 +01:00
tcp_nv.c
tcp_offload.c
tcp_output.c	tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets	2024-05-17 11:43:53 +02:00
tcp_rate.c	tcp: ensure to use the most recently sent skb when filling the rate sample	2022-05-09 09:03:24 +02:00
tcp_recovery.c	tcp: fix excessive TLP and RACK timeouts from HZ rounding	2023-10-25 11:53:21 +02:00
tcp_scalable.c
tcp_timer.c	net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled	2023-08-30 16:27:19 +02:00
tcp_ulp.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tunnel4.c
udp.c	udp: preserve the connected status if only UDP cmsg	2024-05-02 16:18:37 +02:00
udp_diag.c
udp_impl.h
udp_offload.c
udp_tunnel.c	net/tunnel: wait until all sk_user_data reader finish before releasing the sock	2023-01-18 11:41:14 +01:00
udplite.c	udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().	2023-05-30 12:44:09 +01:00
xfrm4_input.c	xfrm: Preserve vlan tags for transport mode software GRO	2024-05-17 11:43:53 +02:00
xfrm4_output.c
xfrm4_policy.c
xfrm4_protocol.c	net: xfrm: unexport __init-annotated xfrm4_protocol_init()	2022-06-14 18:11:58 +02:00
xfrm4_state.c
xfrm4_tunnel.c