Gavrilov Ilia
e06f0d3f66
net/x25: fix incorrect parameter validation in the x25_getsockopt() function ...
[ Upstream commit d6eb8de2015f0c24822e47356f839167ebde2945 ]
The 'len' variable can't be negative when assigned the result of
'min_t' because all 'min_t' parameters are cast to unsigned int,
and then the minimum one is chosen.
To fix the logic, check 'len' as read from 'optlen',
where the types of relevant variables are (signed) int.
Fixes: 1da177e4c3
2024-03-26 18:22:18 -04:00
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
2024-01-08 11:29:47 +01:00
mrp: introduce active flags to prevent UAF when applicant uninit
2023-01-18 11:41:37 +01:00
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
2024-02-23 08:24:50 +01:00
appletalk: Fix Use-After-Free in atalk_ioctl
2023-12-20 15:41:18 +01:00
atm: Fix Use-After-Free in do_vcc_ioctl
2023-12-20 15:41:15 +01:00
batman-adv: Hold rtnl lock during MTU update via netlink
2023-08-30 16:27:25 +02:00
Bluetooth: hci_core: Fix possible buffer overflow
2024-03-26 18:22:17 -04:00
bpf: Move skb->len == 0 checks into __bpf_redirect
2023-01-18 11:41:04 +01:00
net: bridge: clear bridge's private skb space on xmit
2024-03-01 13:13:35 +01:00
net: caif: Fix use-after-free in cfusbl_device_notify()
2023-03-17 08:32:51 +01:00
can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
2024-02-23 08:25:13 +01:00
libceph: use kernel_connect()
2023-10-25 11:53:19 +02:00
sock_diag: annotate data-races around sock_diag_handlers[family]
2024-03-26 18:22:14 -04:00
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-11 11:53:57 +02:00
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
2023-11-20 10:30:15 +01:00
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
net: dsa: tag_sja1105: fix MAC DA patching from meta frames
2023-07-27 08:37:24 +02:00
hsr: Avoid double remove of a node.
2023-01-18 11:41:09 +01:00
net: sched: ife: fix potential use-after-free
2024-01-08 11:29:44 +01:00
udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
2024-03-26 18:22:17 -04:00
ipv6: fib6_rules: flush route cache when rule is changed
2024-03-26 18:22:17 -04:00
net/iucv: fix the allocation size of iucv_path_table array
2024-03-26 18:22:12 -04:00
net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
2024-03-26 18:22:18 -04:00
net: af_key: fix sadb_x_filter validation
2023-08-30 16:27:16 +02:00
l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
2024-03-26 18:22:17 -04:00
llc: call sock_orphan() at release time
2024-02-23 08:25:04 +01:00
wifi: mac80211: fix race condition on enabling fast-xmit
2024-03-01 13:13:33 +01:00
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
2022-12-14 11:30:45 +01:00
net: mpls: fix stale pointer if allocation fails during device rename
2023-02-22 12:50:41 +01:00
net/ncsi: Fix netlink major/minor version numbers
2024-01-25 14:34:25 -08:00
netfilter: nf_conntrack_h323: Add protection for bmp length out of range
2024-03-15 10:48:15 -04:00
calipso: fix memory leak in netlbl_calipso_add_pass()
2024-01-25 14:34:23 -08:00
netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
2024-03-06 14:36:08 +00:00
netrom: Fix data-races around sysctl_net_busy_read
2024-03-15 10:48:16 -04:00
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
2024-02-23 08:25:11 +01:00
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
2023-05-30 12:44:05 +01:00
net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
2023-02-22 12:50:25 +01:00
packet: move from strlcpy with unused retval to strscpy
2024-03-01 13:13:37 +01:00
psample: Require 'CAP_NET_ADMIN' when joining "packets" group
2023-12-13 18:18:17 +01:00
net/rds: fix WARNING in rds_conn_connect_if_down
2024-03-15 10:48:14 -04:00
net: rfkill: gpio: set GPIO direction
2024-01-08 11:29:47 +01:00
net/rose: fix races in rose_kill_by_device()
2024-01-08 11:29:44 +01:00
rxrpc: Fix response to PING RESPONSE ACKs to a dead call
2024-02-23 08:25:07 +01:00
net/sched: Retire dsmark qdisc
2024-03-01 13:13:32 +01:00
sctp: update hb timer immediately after users change hb_interval
2023-10-10 21:46:45 +02:00
net/smc: fix illegal rmb_desc access in SMC-D connection dump
2024-02-23 08:24:50 +01:00
SUNRPC: fix some memleaks in gssx_dec_option_array
2024-03-26 18:22:16 -04:00
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
2024-02-23 08:25:07 +01:00
tls: stop recv() if initial process_rx_list gave us non-DATA
2024-03-01 13:13:37 +01:00
af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
2024-03-26 18:22:15 -04:00
virtio/vsock: fix logic which reduces credit update messages
2024-01-25 14:34:25 -08:00
wifi: nl80211: reject iftype change with mesh ID change
2024-03-06 14:36:09 +00:00
net/x25: fix incorrect parameter validation in the x25_getsockopt() function
2024-03-26 18:22:18 -04:00
xsk: Honor SO_BINDTODEVICE on bind
2023-07-27 08:37:23 +02:00
xfrm: interface: use DEV_STATS_INC()
2023-10-25 11:53:21 +02:00
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
Remove DECnet support from kernel
2023-06-21 15:44:10 +02:00
net: Save and restore msg_namelen in sock_sendmsg
2024-01-15 18:25:26 +01:00
e06f0d3f66