Ghalem Boudour
e895140826
xfrm: fix policy lookup for ipv6 gre packets ...
commit bcf141b2eb551b3477b24997ebc09c65f117a803 upstream.
On egress side, xfrm lookup is called from __gre6_xmit() with the
fl6_gre_key field not initialized leading to policies selectors check
failure. Consequently, gre packets are sent without encryption.
On ingress side, INET6_PROTO_NOPOLICY was set, thus packets were not
checked against xfrm policies. Like for egress side, fl6_gre_key should be
correctly set, this is now done in decode_session6().
Fixes: c12b395a46stable@vger.kernel.org
Signed-off-by: Ghalem Boudour <ghalem.boudour@6wind.com>
Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-01-27 09:19:50 +01:00
6lowpan: iphc: Fix an off-by-one check of array index
2021-09-15 09:47:31 +02:00
9p/net: fix missing error check in p9_check_errors
2021-11-17 09:48:49 +01:00
net: vlan: fix underflow for the real_dev refcnt
2021-12-01 09:23:34 +01:00
ax25: NPD bug when detaching AX25 device
2021-12-29 12:23:38 +01:00
batman-adv: allow netlink usage in unprivileged containers
2022-01-27 09:19:41 +01:00
Bluetooth: Fix debugfs entry leak in hci_register_dev()
2022-01-27 09:19:40 +01:00
netfilter: bridge: add support for pppoe filtering
2022-01-27 09:19:31 +01:00
net-caif: avoid user-triggerable WARN_ON(1)
2021-09-22 12:26:40 +02:00
can: j1939: j1939_tp_cmd_recv(): check the dst address of TP.CM_BAM
2021-12-08 09:01:08 +01:00
bpf: Do not WARN in bpf_warn_invalid_xdp_action()
2022-01-27 09:19:43 +01:00
dccp: don't duplicate ccid when cloning dccp sock
2021-09-22 12:26:40 +02:00
net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
2021-09-22 12:26:42 +02:00
net: Fix memory leak in ieee802154_raw_deliver
2021-08-18 08:57:00 +02:00
netfilter: ipt_CLUSTERIP: fix refcount leak in clusterip_tg_check()
2022-01-27 09:19:35 +01:00
xfrm: fix policy lookup for ipv6 gre packets
2022-01-27 09:19:50 +01:00
net/l2tp: Fix reference count leak in l2tp_udp_recv_core
2021-09-22 12:26:41 +02:00
mac80211: allow non-standard VHT MCS-10/11
2022-01-27 09:19:46 +01:00
net: mpls: Fix notifications when deleting a device
2021-12-08 09:01:12 +01:00
net/ncsi: check for error return from call to nla_put_u32
2022-01-05 12:37:45 +01:00
netfilter: fix regression in looped (broad|multi)cast's MAC handling
2021-12-29 12:23:34 +01:00
net: fix NULL pointer reference in cipso_v4_doi_free
2021-09-22 12:26:36 +02:00
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
2021-12-17 10:12:23 +01:00
nfc: llcp: fix NULL error pointer dereference on sendmsg() after failed bind()
2022-01-27 09:19:26 +01:00
ovs: clear skb->tstamp in forwarding path
2021-08-26 08:36:19 -04:00
net/packet: rx_owner_map depends on pg_vec
2021-12-22 09:29:38 +01:00
phonet: refcount leak in pep_sock_accep
2022-01-11 15:23:33 +01:00
net: qrtr: fix another OOB Read in qrtr_endpoint_post
2021-09-03 10:08:12 +02:00
rds: memory leak in __rds_conn_create()
2021-12-22 09:29:37 +01:00
rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer()
2021-12-08 09:01:12 +01:00
sch_qfq: prevent shift-out-of-bounds in qfq_init_qdisc
2022-01-11 15:23:32 +01:00
sctp: use call_rcu to free endpoint
2022-01-05 12:37:44 +01:00
net/smc: Prevent smc_release() from long blocking
2021-12-22 09:29:38 +01:00
bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding
2021-11-17 09:48:48 +01:00
SUNRPC: Partial revert of commit 6f9f17287e78
2021-11-17 09:48:50 +01:00
net: switchdev: do not propagate bridge updates across bridges
2021-10-27 09:54:24 +02:00
tipc: increase timeout in tipc_sk_enqueue()
2021-09-22 12:26:41 +02:00
net/tls: Fix authentication failure in CCM mode
2021-12-08 09:01:14 +01:00
af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
2021-10-06 15:42:35 +02:00
vsock: prevent unnecessary refcnt inc for nonblocking connect
2021-11-17 09:48:48 +01:00
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
2021-11-26 10:47:22 +01:00
Revert "xsk: Do not sleep in poll() when need_wakeup set"
2021-12-22 09:29:40 +01:00
xfrm: fix policy lookup for ipv6 gre packets
2022-01-27 09:19:50 +01:00
net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
2021-09-03 10:08:16 +02:00
e895140826