Wang Hai
db613c4e1d
UPSTREAM: wireguard: socket: free skb in send6 when ipv6 is disabled
I got a memory leak report:
unreferenced object 0xffff8881191fc040 (size 232):
comm "kworker/u17:0", pid 23193, jiffies 4295238848 (age 3464.870s)
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace:
[<ffffffff814c3ef4>] slab_post_alloc_hook+0x84/0x3b0
[<ffffffff814c8977>] kmem_cache_alloc_node+0x167/0x340
[<ffffffff832974fb>] __alloc_skb+0x1db/0x200
[<ffffffff82612b5d>] wg_socket_send_buffer_to_peer+0x3d/0xc0
[<ffffffff8260e94a>] wg_packet_send_handshake_initiation+0xfa/0x110
[<ffffffff8260ec81>] wg_packet_handshake_send_worker+0x21/0x30
[<ffffffff8119c558>] process_one_work+0x2e8/0x770
[<ffffffff8119ca2a>] worker_thread+0x4a/0x4b0
[<ffffffff811a88e0>] kthread+0x120/0x160
[<ffffffff8100242f>] ret_from_fork+0x1f/0x30
In function wg_socket_send_buffer_as_reply_to_skb() or wg_socket_send_
buffer_to_peer(), the semantics of send6() is required to free skb. But
when CONFIG_IPV6 is disable, kfree_skb() is missing. This patch adds it
to fix this bug.
Bug: 254441685
Signed-off-by: Wang Hai <wanghai38@huawei.com>
Fixes: e7096c131e51 ("net: WireGuard secure network tunnel")
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
(cherry picked from commit bbbf962d9460194993ee1943a793a0a0af4a7fbf)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: Ifa8612153e4bc267a6c651f5c1bc642de09902d8
|
2025-09-24 12:16:40 +02:00 |
| .. |
|
accessibility
|
|
|
|
acpi
|
This is the 5.4.296 stable release
|
2025-07-18 10:57:54 +00:00 |
|
amba
|
|
|
|
android
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
ata
|
ata: pata_cs5536: fix build on 32-bit UML
|
2025-07-17 18:24:57 +02:00 |
|
atm
|
atm: idt77252: Add missing dma_map_error()
|
2025-07-17 18:25:05 +02:00 |
|
auxdisplay
|
|
|
|
base
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
bcma
|
|
|
|
block
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
bluetooth
|
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-06-30 10:49:17 +03:00 |
|
bus
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
cdrom
|
|
|
|
char
|
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-06-30 10:49:17 +03:00 |
|
clk
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
clocksource
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
connector
|
|
|
|
counter
|
counter: stm32-lptimer-cnt: fix error handling when enabling
|
2025-04-10 14:29:39 +02:00 |
|
cpufreq
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
cpuidle
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
crypto
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
dax
|
|
|
|
dca
|
|
|
|
devfreq
|
|
|
|
dio
|
|
|
|
dma
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
dma-buf
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
edac
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
eisa
|
|
|
|
extcon
|
|
|
|
firewire
|
|
|
|
firmware
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
fpga
|
fpga: altera-cvp: Increase credit timeout
|
2025-06-04 14:32:32 +02:00 |
|
fsi
|
|
|
|
gnss
|
|
|
|
gpio
|
gpio: zynq: Fix wakeup source leaks on device unbind
|
2025-05-02 07:39:17 +02:00 |
|
gpu
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
greybus
|
|
|
|
hid
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
hsi
|
HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
|
2025-05-02 07:39:18 +02:00 |
|
hv
|
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
|
2025-04-10 14:29:35 +02:00 |
|
hwmon
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
hwspinlock
|
|
|
|
hwtracing
|
Merge tag 'ASB-2025-05-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-05-18 08:00:20 +00:00 |
|
i2c
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
i3c
|
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-06-30 10:49:17 +03:00 |
|
ide
|
|
|
|
idle
|
|
|
|
iio
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
infiniband
|
This is the 5.4.296 stable release
|
2025-07-18 10:57:54 +00:00 |
|
input
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
interconnect
|
|
|
|
iommu
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
ipack
|
|
|
|
irqchip
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
isdn
|
|
|
|
leds
|
Merge tag 'ASB-2025-05-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-05-18 08:00:20 +00:00 |
|
lightnvm
|
|
|
|
macintosh
|
|
|
|
mailbox
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
mcb
|
mcb: fix a double free bug in chameleon_parse_gdd()
|
2025-05-02 07:39:26 +02:00 |
|
md
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
media
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
memory
|
|
|
|
memstick
|
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
|
2025-04-10 14:29:39 +02:00 |
|
message
|
|
|
|
mfd
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
misc
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
mmc
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
mtd
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
mux
|
|
|
|
net
|
UPSTREAM: wireguard: socket: free skb in send6 when ipv6 is disabled
|
2025-09-24 12:16:40 +02:00 |
|
nfc
|
|
|
|
ntb
|
ntb: reduce stack usage in idt_scan_mws
|
2025-05-02 07:39:28 +02:00 |
|
nubus
|
|
|
|
nvdimm
|
libnvdimm/labels: Fix divide error in nd_label_data_init()
|
2025-06-04 14:32:30 +02:00 |
|
nvme
|
nvmet-tcp: don't restore null sk_state_change
|
2025-06-04 14:32:35 +02:00 |
|
nvmem
|
Merge tag 'ASB-2025-05-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-05-18 08:00:20 +00:00 |
|
of
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
opp
|
|
|
|
oprofile
|
|
|
|
parisc
|
|
|
|
parport
|
parport_pc: add support for ASIX AX99100
|
2025-03-13 12:43:19 +01:00 |
|
pci
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
pcmcia
|
|
|
|
perf
|
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-06-30 10:49:17 +03:00 |
|
phy
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
pinctrl
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
platform
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
pnp
|
|
|
|
power
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
powercap
|
powercap: call put_device() on an error path in powercap_register_control_type()
|
2025-04-10 14:29:36 +02:00 |
|
pps
|
pps: Fix a use-after-free
|
2025-03-13 12:43:19 +01:00 |
|
ps3
|
|
|
|
ptp
|
ptp: Ensure info->enable callback is always set
|
2025-03-13 12:43:11 +01:00 |
|
pwm
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
rapidio
|
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
|
2025-06-27 11:02:56 +01:00 |
|
ras
|
|
|
|
regulator
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
remoteproc
|
|
|
|
reset
|
|
|
|
rpmsg
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
rtc
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
s390
|
scsi: s390: zfcp: Ensure synchronous unit_add
|
2025-06-27 11:02:56 +01:00 |
|
sbus
|
|
|
|
scsi
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
sfi
|
|
|
|
sh
|
|
|
|
siox
|
|
|
|
slimbus
|
Merge tag 'ASB-2025-05-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-05-18 08:00:20 +00:00 |
|
soc
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
soundwire
|
|
|
|
spi
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
spmi
|
|
|
|
ssb
|
|
|
|
staging
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
target
|
This is the 5.4.294 stable release
|
2025-06-05 07:11:21 +00:00 |
|
tc
|
|
|
|
tee
|
tee: Prevent size calculation wraparound on 32-bit kernels
|
2025-06-27 11:02:55 +01:00 |
|
thermal
|
Merge tag 'ASB-2025-06-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-06-30 10:49:17 +03:00 |
|
thunderbolt
|
thunderbolt: Do not double dequeue a configuration request
|
2025-06-27 11:02:44 +01:00 |
|
tty
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
uio
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
usb
|
Merge tag 'ASB-2025-09-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-12 18:48:05 +03:00 |
|
vfio
|
This is the 5.4.291 stable release
|
2025-03-13 14:53:52 +00:00 |
|
vhost
|
|
|
|
video
|
Merge tag 'ASB-2025-08-05_11-5.4' of https://android.googlesource.com/kernel/common into android13-5.4-lahaina
|
2025-09-01 13:17:46 +03:00 |
|
virt
|
|
|
|
virtio
|
|
|
|
visorbus
|
|
|
|
vlynq
|
|
|
|
vme
|
|
|
|
w1
|
|
|
|
watchdog
|
watchdog: da9052_wdt: respect TWDMIN
|
2025-06-27 11:02:55 +01:00 |
|
xen
|
xen/swiotlb: relax alignment requirements
|
2025-06-04 14:32:37 +02:00 |
|
zorro
|
|
|
|
Kconfig
|
|
|
|
Makefile
|
|
|
|
OWNERS
|
|
|