git/linux-net
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/ synced 2026-04-03 23:37:40 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
fd63f185979b047fb22a0dfc6bd94d0cab6a6a70
linux-net/net
History
Paolo Abeni fd63f18597 ipv6: prevent possible UaF in addrconf_permanent_addr() 
The mentioned helper try to warn the user about an exceptional
condition, but the message is delivered too late, accessing the ipv6
after its possible deletion.

Reorder the statement to avoid the possible UaF; while at it, place the
warning outside the idev->lock as it needs no protection.

Reported-by: Jakub Kicinski <kuba@kernel.org>
Closes: https://sashiko.dev/#/patchset/8c8bfe2e1a324e501f0e15fef404a77443fd8caf.1774365668.git.pabeni%40redhat.com
Fixes: f1705ec197 ("net: ipv6: Make address flushing on ifdown optional")
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Link: https://patch.msgid.link/ef973c3a8cb4f8f1787ed469f3e5391b9fe95aa0.1774601542.git.pabeni@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-03-30 17:25:10 -07:00
..
6lowpan
net: replace ND_PRINTK with dynamic debug
2025-07-10 15:27:32 -07:00
9p
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
802
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
8021q
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
appletalk
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
atm
atm: lec: fix use-after-free in sock_def_readable()
2026-03-14 08:05:47 -07:00
ax25
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
batman-adv
Merge tag 'batadv-net-pullrequest-20260317' of https://git.open-mesh.org/linux-merge
2026-03-18 17:41:00 -07:00
bluetooth
Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop
2026-03-25 15:32:32 -04:00
bpf
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
bridge
bridge: br_nd_send: validate ND option lengths
2026-03-27 20:37:14 -07:00
caif
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
can
can: isotp: fix tx.buf use-after-free in isotp_sendmsg()
2026-03-19 17:16:02 +01:00
ceph
libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()
2026-03-11 10:18:56 +01:00
core
rtnetlink: fix leak of SRCU struct in rtnl_link_register
2026-03-24 20:56:02 -07:00
dcb
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
devlink
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
dns_resolver
net/dns_resolver: use credential guards in dns_query()
2025-11-04 12:36:51 +01:00
dsa
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ethernet
bonding: prevent potential infinite loop in bond_header_parse()
2026-03-16 19:29:45 -07:00
ethtool
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
handshake
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
hsr
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ieee802154
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ife
…
ipv4
Merge tag 'ipsec-2026-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2026-03-24 15:16:28 +01:00
ipv6
ipv6: prevent possible UaF in addrconf_permanent_addr()
2026-03-30 17:25:10 -07:00
iucv
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
kcm
kcm: fix zero-frag skb in frag_list on partial sendmsg error
2026-02-23 17:26:55 -08:00
key
Merge tag 'ipsec-2026-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2026-03-24 15:16:28 +01:00
l2tp
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
l3mdev
…
lapb
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
llc
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
mac80211
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
2026-03-18 09:09:58 +01:00
mac802154
bonding: prevent potential infinite loop in bond_header_parse()
2026-03-16 19:29:45 -07:00
mctp
mctp: route: hold key->lock in mctp_flow_prepare_output()
2026-03-10 11:38:36 +01:00
mpls
mpls: add seqcount to protect the platform_label{,s} pair
2026-03-26 18:32:14 -07:00
mptcp
MPTCP: fix lock class name family in pm_nl_create_listen_socket
2026-03-19 09:37:48 -07:00
ncsi
net: ncsi: fix skb leak in error paths
2026-03-06 17:34:48 -08:00
netfilter
netfilter: ctnetlink: use netlink policy range checks
2026-03-26 13:28:17 +01:00
netlabel
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
netlink
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
netrom
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
nfc
nfc: nci: fix circular locking dependency in nci_close_device
2026-03-19 16:56:18 -07:00
nsh
…
openvswitch
openvswitch: validate MPLS set/set_masked payload length
2026-03-20 18:37:31 -07:00
packet
net: fix fanout UAF in packet_release() via NETDEV_UP race
2026-03-23 17:07:19 -07:00
phonet
bonding: prevent potential infinite loop in bond_header_parse()
2026-03-16 19:29:45 -07:00
psample
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
psp
Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-26 08:00:13 -08:00
qrtr
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak
2026-03-26 20:22:38 -07:00
rds
net/rds: Fix circular locking dependency in rds_tcp_tune
2026-03-03 12:57:06 +01:00
rfkill
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
rose
net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
2026-03-12 19:23:59 -07:00
rxrpc
rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
2026-03-06 17:49:52 -08:00
sched
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
2026-03-27 20:41:11 -07:00
sctp
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
shaper
net: shaper: protect from late creation of hierarchy
2026-03-19 13:47:15 +01:00
smc
net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer
2026-03-20 18:59:30 -07:00
strparser
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-11-13 12:35:38 -08:00
sunrpc
Merge tag 'nfsd-7.0-2' of git://git.kernel.org/pub/scm/linux/kernel/git/cel/linux
2026-03-18 14:27:11 -07:00
switchdev
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
tipc
tipc: fix divide-by-zero in tipc_sk_filter_connect()
2026-03-11 18:56:28 -07:00
tls
tls: Purge async_hold in tls_decrypt_async_wait()
2026-03-26 09:55:53 +01:00
unix
af_unix: Give up GC if MSG_PEEK intervened.
2026-03-12 13:37:18 -07:00
vmw_vsock
Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-02-26 08:00:13 -08:00
wireless
wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
2026-03-06 12:41:59 +01:00
x25
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
xdp
xsk: Fix zero-copy AF_XDP fragment drop
2026-02-28 08:55:11 -08:00
xfrm
Merge tag 'ipsec-2026-03-23' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
2026-03-24 15:16:28 +01:00
compat.c
socket: Unify getsockname and getpeername implementation
2025-11-26 13:45:23 -07:00
devres.c
…
Kconfig
net: Kconfig: discourage drop_monitor enablement
2025-10-17 16:29:26 -07:00
Kconfig.debug
…
Makefile
psp: base PSP device support
2025-09-18 12:32:06 +02:00
socket.c
net: Drop the lock in skb_may_tx_timestamp()
2026-02-24 11:27:29 +01:00
sysctl_net.c
…