Cong Wang
bdd99e5f0a
gtp: fix a potential NULL pointer dereference
...
[ Upstream commit defd8b3c37b0f9cb3e0f60f47d3d78d459d57fda ]
When sockfd_lookup() fails, gtp_encap_enable_socket() returns a
NULL pointer, but its callers only check for error pointers thus miss
the NULL pointer case.
Fix it by returning an error pointer with the error code carried from
sockfd_lookup().
(I found this bug during code inspection.)
Fixes: 1e3a3abd8b ("gtp: make GTP sockets in gtp_newlink optional")
Cc: Andreas Schultz <aschultz@tpip.net>
Cc: Harald Welte <laforge@gnumonks.org>
Signed-off-by: Cong Wang <cong.wang@bytedance.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Reviewed-by: Pablo Neira Ayuso <pablo@netfilter.org>
Link: https://patch.msgid.link/20240825191638.146748-1-xiyou.wangcong@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-09-04 13:15:03 +02:00
..
accessibility
acpi
ACPI: SBS: manage alarm sysfs attribute through psy core
2024-08-19 05:33:47 +02:00
amba
android
binder: fix hang of unregistered readers
2024-08-19 05:33:37 +02:00
ata
ata: libata-core: Fix null pointer dereference on error
2024-09-04 13:15:02 +02:00
atm
atm: idt77252: prevent use after free in dequeue_rx()
2024-09-04 13:14:51 +02:00
auxdisplay
base
driver core: Fix uevent_show() vs driver detach race
2024-08-19 05:33:52 +02:00
bcma
block
rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
2024-08-19 05:33:40 +02:00
bluetooth
Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
2024-09-04 13:15:01 +02:00
bus
cdrom
char
hwrng: amd - Convert PCIBIOS_* return codes to errnos
2024-08-19 05:33:37 +02:00
clk
clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
2024-08-19 05:33:37 +02:00
clocksource
clocksource/drivers/sh_cmt: Address race condition for clock events
2024-08-19 05:33:46 +02:00
connector
counter
cpufreq
cpufreq: exit() callback is optional
2024-06-16 13:28:34 +02:00
cpuidle
crypto
crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
2024-06-16 13:28:51 +02:00
dax
dca
devfreq
dio
dma
dmaengine: ioatdma: Fix missing kmem_cache_destroy()
2024-07-05 09:08:23 +02:00
dma-buf
dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
2024-06-16 13:28:47 +02:00
edac
EDAC, i10nm: make skx_common.o a separate module
2024-08-19 05:33:25 +02:00
eisa
extcon
extcon: max8997: select IRQ_DOMAIN instead of depending on it
2024-06-16 13:28:43 +02:00
firewire
firewire: nosy: ensure user_length is taken into account when fetching packet contents
2024-05-17 11:43:54 +02:00
firmware
firmware: turris-mox-rwtm: Initialize completion before mailbox
2024-08-19 05:33:28 +02:00
fpga
fsi
gnss
gpio
gpio: davinci: Validate the obtained number of IRQs
2024-07-05 09:08:28 +02:00
gpu
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
2024-09-04 13:15:02 +02:00
greybus
greybus: Fix use-after-free bug in gb_interface_release due to race condition.
2024-07-05 09:08:20 +02:00
hid
HID: microsoft: Add rumble support to latest xbox controllers
2024-09-04 13:15:01 +02:00
hsi
hv
hv_utils: drain the timesync packets on onchannelcallback
2024-07-05 09:08:20 +02:00
hwmon
hwmon: (max6697) Fix swapped temp{1,8} critical alarms
2024-08-19 05:33:26 +02:00
hwspinlock
hwtracing
intel_th: pci: Add Lunar Lake support
2024-07-05 09:08:19 +02:00
i2c
i2c: riic: avoid potential division by zero
2024-09-04 13:14:53 +02:00
i3c
ide
idle
iio
iio: chemical: bme680: Fix sensor data read operation
2024-07-05 09:08:29 +02:00
infiniband
IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
2024-09-04 13:14:54 +02:00
input
Input: MT - limit max slots
2024-09-04 13:15:01 +02:00
interconnect
iommu
iommu/amd: Fix sysfs leak in iommu init
2024-07-05 09:08:16 +02:00
ipack
irqchip
irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
2024-09-04 13:14:57 +02:00
isdn
mISDN: Fix a use after free in hfcmulti_tx()
2024-08-19 05:33:42 +02:00
leds
leds: ss4200: Convert PCIBIOS_* return codes to errnos
2024-08-19 05:33:37 +02:00
lightnvm
macintosh
macintosh/therm_windtunnel: fix module unload.
2024-08-19 05:33:34 +02:00
mailbox
mcb
md
dm suspend: return -ERESTARTSYS instead of -EINTR
2024-09-04 13:14:58 +02:00
media
media: uvcvideo: Fix integer overflow calculating timestamp
2024-09-04 13:15:02 +02:00
memory
memstick
message
mfd
mfd: omap-usb-tll: Use struct_size to allocate tll
2024-08-19 05:33:32 +02:00
misc
mei: demote client disconnect warning on suspend to debug
2024-07-27 10:38:29 +02:00
mmc
mmc: dw_mmc: allow biu and ciu clocks to defer
2024-09-04 13:15:01 +02:00
mtd
ubi: eba: properly rollback inside self_check_eba
2024-08-19 05:33:38 +02:00
mux
net
gtp: fix a potential NULL pointer dereference
2024-09-04 13:15:03 +02:00
nfc
NFC: trf7970a: disable all regulators on removal
2024-05-02 16:18:33 +02:00
ntb
nubus
nvdimm
nvme
nvmet-rdma: fix possible bad dereference when freeing rsps
2024-09-04 13:14:57 +02:00
nvmem
nvmem: meson-efuse: Fix return value of nvmem callbacks
2024-07-18 11:40:55 +02:00
of
opp
oprofile
parisc
parport
dev/parport: fix the array out-of-bounds risk
2024-08-19 05:33:43 +02:00
pci
PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
2024-08-19 05:33:43 +02:00
pcmcia
perf
phy
pinctrl
pinctrl: single: fix potential NULL dereference in pcs_get_function()
2024-09-04 13:15:02 +02:00
platform
platform: mips: cpu_hwmon: Disable driver on unsupported hardware
2024-08-19 05:33:39 +02:00
pnp
power
power: supply: axp288_charger: Round constant_charge_voltage writes down
2024-08-19 05:33:52 +02:00
powercap
pps
ps3
ptp
ptp: Fix error message on failed pin verification
2024-07-05 09:08:11 +02:00
pwm
pwm: stm32: Always do lazy disabling
2024-08-19 05:33:26 +02:00
rapidio
ras
regulator
regulator: core: Fix modpost error "regulator_get_regmap" undefined
2024-07-05 09:08:23 +02:00
remoteproc
remoteproc: imx_rproc: Skip over memory region when node value is NULL
2024-08-19 05:33:44 +02:00
reset
rpmsg
rtc
rtc: isl1208: Fix return value of nvmem callbacks
2024-08-19 05:33:39 +02:00
s390
s390/cio: rename bitmap_size() -> idset_bitmap_size()
2024-09-04 13:14:51 +02:00
sbus
scsi
scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
2024-09-04 13:14:55 +02:00
sfi
sh
siox
slimbus
slimbus: core: Remove usage of the deprecated ida_simple_xx() API
2024-04-13 12:51:26 +02:00
soc
soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
2024-07-05 09:08:28 +02:00
soundwire
soundwire: stream: fix programming slave ports for non-continous port maps
2024-09-04 13:15:03 +02:00
spi
spi: spi-fsl-lpspi: Fix scldiv calculation
2024-08-19 05:33:50 +02:00
spmi
ssb
ssb: Fix division by zero issue in ssb_calc_clock_rate
2024-09-04 13:14:53 +02:00
staging
staging: ks7010: disable bh on tx_dev_lock
2024-09-04 13:14:53 +02:00
target
scsi: target: Fix SELinux error when systemd-modules loads the target module
2024-05-17 11:43:51 +02:00
tc
tee
thermal
thunderbolt
tty
serial: core: check uartclk for zero to avoid divide by zero
2024-08-19 05:33:52 +02:00
uio
usb
usb: dwc3: core: Skip setting event buffers for host only controllers
2024-09-04 13:14:57 +02:00
vfio
vfio/platform: Create persistent IRQ handlers
2024-04-13 12:51:34 +02:00
vhost
vhost: Add smp_rmb() in vhost_vq_avail_empty()
2024-05-02 16:18:29 +02:00
video
fbdev: savage: Handle err return when savagefb_check_var failed
2024-06-16 13:28:50 +02:00
virt
virtio
virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
2024-06-16 13:28:46 +02:00
visorbus
vlynq
vme
w1
watchdog
xen
xen/events: close evtchn after mapping cleanup
2024-04-13 12:51:29 +02:00
zorro
Kconfig
Makefile