Eric Dumazet
6ccaa5797f
vrf: use RCU protection in l3mdev_l3_out()
[ Upstream commit 6d0ce46a93135d96b7fa075a94a88fe0da8e8773 ]
l3mdev_l3_out() can be called without RCU being held:
raw_sendmsg()
ip_push_pending_frames()
ip_send_skb()
ip_local_out()
__ip_local_out()
l3mdev_ip_out()
Add rcu_read_lock() / rcu_read_unlock() pair to avoid
a potential UAF.
Fixes: a8e3e1a9f0 ("net: l3mdev: Add hook to output path")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250207135841.1948589-7-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
|
2025-03-13 12:43:12 +01:00 |
| .. |
|
acpi
|
|
|
|
asm-generic
|
asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation
|
2023-12-20 15:41:22 +01:00 |
|
clocksource
|
|
|
|
crypto
|
crypto: af_alg - Disallow multiple in-flight AIO requests
|
2024-01-25 14:34:23 -08:00 |
|
drm
|
drm/printer: Allow NULL data in devcoredump printer
|
2024-11-08 16:20:39 +01:00 |
|
dt-bindings
|
|
|
|
keys
|
|
|
|
kvm
|
|
|
|
linux
|
KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
|
2025-03-13 12:43:07 +01:00 |
|
math-emu
|
|
|
|
media
|
media: rename VFL_TYPE_GRABBER to _VIDEO
|
2024-03-26 18:22:22 -04:00 |
|
misc
|
|
|
|
net
|
vrf: use RCU protection in l3mdev_l3_out()
|
2025-03-13 12:43:12 +01:00 |
|
pcmcia
|
|
|
|
ras
|
|
|
|
rdma
|
|
|
|
scsi
|
scsi: core: Introduce the scsi_cmd_to_rq() function
|
2023-12-08 08:44:28 +01:00 |
|
soc
|
soc: fsl: qbman: Add CGR update function
|
2024-04-13 12:51:27 +02:00 |
|
sound
|
|
|
|
target
|
|
|
|
trace
|
f2fs: reduce expensive checkpoint trigger frequency
|
2024-11-08 16:20:32 +01:00 |
|
uapi
|
netfilter: Replace zero-length array with flexible-array member
|
2025-01-09 13:23:35 +01:00 |
|
vdso
|
|
|
|
video
|
|
|
|
xen
|
xen/xenbus: fix locking
|
2024-12-14 19:44:47 +01:00 |