Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Alexey Simakov 61cda2777b sctp: avoid NULL dereference when chunk data buffer is missing ... [ Upstream commit 441f0647f7673e0e64d4910ef61a5fb8f16bfb82 ] chunk->skb pointer is dereferenced in the if-block where it's supposed to be NULL only. chunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list instead and do it just before replacing chunk->skb. We're sure that otherwise chunk->skb is non-NULL because of outer if() condition. Fixes: 90017accff ("sctp: Add GSO support") Signed-off-by: Alexey Simakov <bigalex934@gmail.com> Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com> Link: https://patch.msgid.link/20251021130034.6333-1-bigalex934@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-10-29 13:59:59 +01:00
..
6lowpan
9p	net/9p: fix double req put in p9_fd_cancelled	2025-10-29 13:59:54 +01:00
802	net: 802: LLC+SNAP OID:PID lookup on start of skb data	2025-02-01 18:18:45 +01:00
8021q	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime	2025-08-28 16:21:16 +02:00
appletalk	net: appletalk: Fix use-after-free in AARP proxy probe	2025-08-28 16:21:17 +02:00
atm	net: atm: fix memory leak in atm_register_sysfs when device_register fail	2025-09-09 18:43:58 +02:00
ax25	ax25: properly unshare skbs in ax25_kiss_rcv()	2025-09-09 18:43:58 +02:00
batman-adv	batman-adv: fix OOB read/write in network-coding decode	2025-09-09 18:43:59 +02:00
bluetooth	Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()	2025-09-09 18:43:57 +02:00
bpf
bpfilter	bpfilter: match bit size of bpfilter_umh to that of the kernel	2025-07-17 18:24:51 +02:00
bridge	netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it	2025-06-27 11:02:46 +01:00
caif	caif: reduce stack size, again	2025-08-28 16:21:19 +02:00
can	can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails	2025-10-02 13:34:29 +02:00
ceph	libceph: fix race between delayed_work() and ceph_monc_stop()	2024-07-18 11:40:55 +02:00
core	rtnetlink: Allow deleting FDB entries in user namespace	2025-10-29 13:59:59 +01:00
dcb
dccp	net: fix data-races around sk->sk_forward_alloc	2025-02-01 18:18:52 +01:00
decnet
dns_resolver
dsa	net: dsa: microchip: linearize skb for tail-tagging switches	2025-09-09 18:44:00 +02:00
ethernet
hsr
ieee802154	net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()	2024-12-14 19:44:51 +01:00
ife
ipv4	tcp: fix tcp_tso_should_defer() vs large RTT	2025-10-29 13:59:57 +01:00
ipv6	net/ip6_tunnel: Prevent perpetual tunnel growth	2025-10-29 13:59:56 +01:00
iucv	s390/iucv: fix receive buffer virtual vs physical address confusion	2024-09-04 13:14:57 +02:00
kcm	kcm: Serialise kcm_sendmsg() for the same socket.	2024-09-04 13:14:59 +02:00
key
l2tp	genetlink: hold RCU in genlmsg_mcast()	2024-11-08 16:20:50 +01:00
l3mdev
lapb
llc	llc: fix data loss when reading from a socket in llc_ui_recvmsg()	2025-06-04 14:32:35 +02:00
mac80211	wifi: mac80211: fix incorrect type for ret	2025-10-02 13:34:30 +02:00
mac802154	mac802154: check local interfaces before deleting sdata list	2025-02-01 18:18:50 +01:00
mpls	mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().	2025-06-27 11:02:57 +01:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-08-28 16:21:27 +02:00
netfilter	ipvs: Defer ip_vs_ftp unregister during netns cleanup	2025-10-29 13:59:49 +01:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-27 11:02:50 +01:00
netlink	netlink: avoid infinite retry looping in netlink_unicast()	2025-08-28 16:21:23 +02:00
netrom	netrom: check buffer length before accessing it	2025-01-09 13:23:35 +01:00
nfc	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-27 11:02:51 +01:00
nsh
openvswitch	openvswitch: Fix unsafe attribute parsing in output_userspace()	2025-06-04 14:32:29 +02:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-28 16:21:23 +02:00
phonet	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()	2025-08-28 16:21:14 +02:00
psample
qrtr	net: qrtr: Update packets cloning when broadcasting	2024-11-08 16:20:33 +01:00
rds	rds: ib: Increment i_fastreg_wrs before bailing out	2025-10-02 13:34:31 +02:00
rfkill	net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer	2025-10-02 13:34:32 +02:00
rose	rose: fix dangling neighbour pointers in rose_rt_device_down()	2025-07-17 18:25:00 +02:00
rxrpc	rxrpc: Fix oops due to non-existence of prealloc backlog struct	2025-07-17 18:25:02 +02:00
sched	net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate	2025-08-28 16:21:37 +02:00
sctp	sctp: avoid NULL dereference when chunk data buffer is missing	2025-10-29 13:59:59 +01:00
smc	net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll	2025-01-09 13:23:27 +01:00
strparser
sunrpc	xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create	2025-06-27 11:02:58 +01:00
switchdev
tipc	tipc: Fix use-after-free in tipc_conn_close().	2025-07-17 18:25:01 +02:00
tls	tls: don't rely on tx_work during send()	2025-10-29 13:59:57 +01:00
unix	af_unix: Remove put_pid()/put_cred() in copy_peercred().	2024-09-12 11:03:52 +02:00
vmw_vsock	vsock: Do not allow binding to VMADDR_PORT_ANY	2025-08-28 16:21:23 +02:00
wimax
wireless	wifi: cfg80211: fix use-after-free in cmp_bss()	2025-09-09 18:43:56 +02:00
x25
xdp	xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING	2024-06-16 13:28:52 +02:00
xfrm	xfrm: Sanitize marks before insert	2025-06-04 14:32:35 +02:00
compat.c
Kconfig
Makefile
socket.c
sysctl_net.c