git/linux-nf
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git synced 2026-04-03 23:38:12 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
main
linux-nf/include/net
History
Sabrina Dubroca 629ec78ef8 mpls: add seqcount to protect the platform_label{,s} pair 
The RCU-protected codepaths (mpls_forward, mpls_dump_routes) can have
an inconsistent view of platform_labels vs platform_label in case of a
concurrent resize (resize_platform_label_table, under
platform_mutex). This can lead to OOB accesses.

This patch adds a seqcount, so that we get a consistent snapshot.

Note that mpls_label_ok is also susceptible to this, so the check
against RTA_DST in rtm_to_route_config, done outside platform_mutex,
is not sufficient. This value gets passed to mpls_label_ok once more
in both mpls_route_add and mpls_route_del, so there is no issue, but
that additional check must not be removed.

Reported-by: Yuan Tan <tanyuan98@outlook.com>
Reported-by: Yifan Wu <yifanwucs@gmail.com>
Reported-by: Juefei Pu <tomapufckgml@gmail.com>
Reported-by: Xin Liu <bird@lzu.edu.cn>
Fixes: 7720c01f3f ("mpls: Add a sysctl to control the size of the mpls label table")
Fixes: dde1b38e87 ("mpls: Convert mpls_dump_routes() to RCU.")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Link: https://patch.msgid.link/cd8fca15e3eb7e212b094064cd83652e20fd9d31.1774284088.git.sd@queasysnail.net
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-03-26 18:32:14 -07:00
..
9p
9p: convert to the new mount API
2025-11-03 16:49:53 +09:00
bluetooth
Bluetooth: L2CAP: Fix regressions caused by reusing ident
2026-03-19 14:44:25 -04:00
caif
caif: Remove unused cfsrvl_getphyid
2024-10-08 15:33:49 -07:00
iucv
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
libeth
libeth, idpf: use truesize as XDP RxQ info frag_size
2026-03-05 08:02:05 -08:00
mana
Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma
2026-02-12 17:05:20 -08:00
netfilter
netfilter: nf_conntrack_expect: store netns and zone in expectation
2026-03-26 13:24:40 +01:00
netns
mpls: add seqcount to protect the platform_label{,s} pair
2026-03-26 18:32:14 -07:00
nfc
nfc: nci: Fix race between rfkill and nci_unregister_device().
2026-01-28 19:32:26 -08:00
page_pool
page_pool: store detach_time as ktime_t to avoid false-negatives
2026-03-10 19:03:34 -07:00
phonet
phonet: Convert phonet_routes.lock to spinlock_t.
2024-10-24 16:03:40 +02:00
phy
net: phy: realtek: add dummy PHY driver for RTL8127ATF
2026-01-12 19:29:11 -08:00
psp
psp: add stats from psp spec to driver facing api
2025-11-07 18:53:57 -08:00
sctp
sctp: Remove unused declaration sctp_auth_init_hmacs()
2025-11-14 18:00:34 -08:00
tc_act
net/sched: act_ife: Fix metalist update behavior
2026-03-05 07:54:08 -08:00
6lowpan.h
…
act_api.h
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
2026-02-27 19:06:21 -08:00
addrconf.h
ipv6: addrconf: reduce default temp_valid_lft to 2 days
2026-02-17 17:12:06 -08:00
af_ieee802154.h
…
af_rxrpc.h
rxrpc: Remove deadcode
2025-04-24 17:03:45 -07:00
af_unix.h
af_unix: Introduce SO_INQ.
2025-07-08 18:05:25 -07:00
af_vsock.h
vsock: lock down child_ns_mode as write-once
2026-02-26 11:10:03 +01:00
ah.h
…
aligned_data.h
udp: move udp_memory_allocated into net_aligned_data
2025-07-02 14:22:02 -07:00
amt.h
…
arp.h
…
atmclip.h
…
ax25.h
Merge tag 'sysctl-7.00-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/sysctl/sysctl
2026-02-18 10:45:36 -08:00
ax88796.h
…
bareudp.h
…
bond_3ad.h
bonding: support aggregator selection based on port priority
2025-09-09 10:56:02 +02:00
bond_alb.h
bonding: Correct spelling in headers
2024-08-26 09:37:22 -07:00
bond_options.h
bonding: add support for per-port LACP actor priority
2025-09-09 10:56:02 +02:00
bonding.h
bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded
2026-03-03 10:47:37 +01:00
bpf_sk_storage.h
…
busy_poll.h
net: gro: decouple GRO from the NAPI layer
2025-02-27 14:03:14 +01:00
calipso.h
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
can.h
can: add CAN skb extension infrastructure
2026-02-05 11:58:39 +01:00
cfg80211-wext.h
…
cfg80211.h
wifi: cfg80211: add initial UHR support
2026-02-02 10:11:07 +01:00
cfg802154.h
mac802154: fix llsec key resources release in mac802154_llsec_key_del
2024-03-06 21:01:26 +01:00
checksum.h
net: Fix checksum update for ILA adj-transport
2025-05-30 19:53:51 -07:00
cipso_ipv4.h
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
cls_cgroup.h
net/cls_cgroup: Fix task_get_classid() during qdisc run
2025-09-14 11:55:04 -07:00
codel_impl.h
net_sched: codel: fix stale state for empty flows in fq_codel
2026-03-24 20:57:57 -07:00
codel_qdisc.h
…
codel.h
codel: fix kernel-doc notation warnings
2023-07-14 20:39:29 -07:00
compat.h
…
datalink.h
net: datalink: Remove unused declarations
2023-07-27 17:17:32 -07:00
dcbevent.h
…
dcbnl.h
…
devlink.h
devlink: support default values for param-get and param-set
2025-11-20 19:01:22 -08:00
dropreason-core.h
net: add net.core.qdisc_max_burst
2026-01-13 10:12:11 +01:00
dropreason.h
wifi: mac80211: Drop cooked monitor support
2025-02-11 11:58:17 +01:00
dsa_stubs.h
net: dsa: Use conduit and user terms
2023-10-24 13:08:14 -07:00
dsa.h
net: dsa: add tag format for MxL862xx switches
2026-02-11 11:27:57 +01:00
dscp.h
net: add IEEE 802.1q specific helpers
2024-05-08 10:35:09 +01:00
dsfield.h
…
dst_cache.h
net: Correct spelling in headers
2024-08-26 09:37:23 -07:00
dst_metadata.h
net: dst_metadata: fix IP_DF bit not extracted from tunnel headers
2025-09-14 14:28:12 -07:00
dst_ops.h
net: fix __dst_negative_advice() race
2024-05-29 17:34:49 -07:00
dst.h
inet: add dst4_mtu() and dst6_mtu() helpers
2026-02-02 17:49:29 -08:00
eee.h
net: simplify eeecfg_mac_can_tx_lpi
2024-11-13 18:49:50 -08:00
erspan.h
net: Correct spelling in headers
2024-08-26 09:37:23 -07:00
esp.h
…
espintcp.h
inet: preserve const qualifier in inet_csk()
2024-04-01 21:27:08 -07:00
ethoc.h
…
failover.h
net: failover: add net device refcount tracker
2021-12-06 16:06:02 -08:00
fib_notifier.h
net: do not acquire rtnl in fib_seq_sum()
2024-10-11 15:35:05 -07:00
fib_rules.h
net: fib_rules: Fix iif / oif matching on L3 master device
2025-04-15 17:54:56 -07:00
firewire.h
…
flow_dissector.h
flow_dissector: cleanup FLOW_DISSECTOR_KEY_ENC_FLAGS
2024-07-15 09:14:39 -07:00
flow_offload.h
net: dsa: eliminate local type for tc policers
2026-02-10 15:30:11 +01:00
flow.h
ipv4: Convert ->flowi4_tos to dscp_t.
2025-08-26 17:34:31 -07:00
fou.h
…
fq_impl.h
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
fq.h
net: fq: Remove unused typedef fq_flow_get_default_t
2023-08-08 15:58:23 -07:00
garp.h
…
gen_stats.h
…
genetlink.h
genetlink: fix typo in comment
2025-09-03 15:16:49 -07:00
geneve.h
…
gre.h
ip_tunnel: convert __be16 tunnel flags to bitmaps
2024-04-01 10:49:28 +01:00
gro_cells.h
…
gro.h
gro: inline tcp6_gro_complete()
2026-01-21 19:28:32 -08:00
gso.h
…
gtp.h
gtp: properly parse extension headers
2024-05-07 01:35:55 +02:00
gue.h
…
handshake.h
net/handshake: Add helpers for parsing incoming TLS Alerts
2023-07-28 14:07:59 -07:00
hotdata.h
net: add net.core.qdisc_max_burst
2026-01-13 10:12:11 +01:00
hwbm.h
net: Correct spelling in headers
2024-08-26 09:37:23 -07:00
icmp.h
ipv4: icmp: Pass IPv4 control block structure as an argument to __icmp_send()
2025-09-11 12:22:38 +02:00
ieee8021q.h
net: add IEEE 802.1q specific helpers
2024-05-08 10:35:09 +01:00
ieee80211_radiotap.h
wifi: mac80211: add RX flag to report radiotap VHT information
2025-10-30 08:38:51 +01:00
ieee802154_netdev.h
mac802154: Handle association requests from peers
2023-11-20 11:43:03 +01:00
if_inet6.h
ipv6: anycast: complete RCU handling of struct ifacaddr6
2024-02-26 18:40:34 -08:00
ife.h
…
inet6_connection_sock.h
tcp: populate inet->cork.fl.u.ip6 in tcp_v6_syn_recv_sock()
2026-02-10 20:57:50 -08:00
inet6_hashtables.h
inet: annotate data-races around isk->inet_num
2026-02-27 17:16:59 -08:00
inet_common.h
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
inet_connection_sock.h
tcp: fix potential race in tcp_v6_syn_recv_sock()
2026-02-19 14:02:19 -08:00
inet_dscp.h
ipv4: Convert ->flowi4_tos to dscp_t.
2025-08-26 17:34:31 -07:00
inet_ecn.h
tcp: ECT_1_NEGOTIATION and NEEDS_ACCECN identifiers
2026-02-03 15:13:24 +01:00
inet_frag.h
inet: frags: flush pending skbs in fqdir_pre_exit()
2025-12-10 01:15:27 -08:00
inet_hashtables.h
udp: Fix wildcard bind conflict check when using hash2
2026-03-23 18:46:45 -07:00
inet_sock.h
ipv6: colocate inet6_cork in inet_cork_full
2026-02-02 17:49:30 -08:00
inet_timewait_sock.h
tcp: Update bind bucket state on port release
2025-09-23 10:12:15 +02:00
inetpeer.h
inetpeer: remove create argument of inet_getpeer()
2024-12-17 19:37:00 -08:00
ioam6.h
ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
2026-02-13 12:24:05 -08:00
ip6_checksum.h
…
ip6_fib.h
ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist.
2026-03-23 16:59:31 -07:00
ip6_route.h
inet: add dst4_mtu() and dst6_mtu() helpers
2026-02-02 17:49:29 -08:00
ip6_tunnel.h
net: prevent NULL deref in ip[6]tunnel_xmit()
2026-03-12 16:03:41 +01:00
ip_fib.h
net: ipv4: fix ARM64 alignment fault in multipath hash seed
2026-03-03 17:20:37 -08:00
ip_tunnels.h
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS
2026-03-12 19:24:45 -07:00
ip_vs.h
ipvs: Fix estimator kthreads preferred affinity
2025-08-13 08:34:33 +02:00
ip.h
inet: annotate data-races around isk->inet_num
2026-02-27 17:16:59 -08:00
ipcomp.h
xfrm: ipcomp: Use crypto_acomp interface
2025-03-21 17:36:49 +08:00
ipconfig.h
…
ipv6_frag.h
inet: frags: flush pending skbs in fqdir_pre_exit()
2025-12-10 01:15:27 -08:00
ipv6_stubs.h
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
ipv6.h
ipv6: fix a race in ip6_sock_set_v6only()
2026-02-17 16:45:29 -08:00
iw_handler.h
Revert "wifi: cfg80211: unexport wireless_nlevent_flush()"
2024-10-09 08:53:01 +02:00
kcm.h
net: kcm: Fix race condition in kcm_unattach()
2025-08-13 18:18:33 -07:00
l3mdev.h
net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out()
2026-02-02 17:09:11 -08:00
lag.h
…
lapb.h
net: lapb: increase LAPB_HEADER_LEN
2024-12-06 17:43:08 -08:00
llc_c_ac.h
net: llc: Remove unused function declarations
2023-08-04 15:33:17 -07:00
llc_c_ev.h
net: llc: Remove unused function declarations
2023-08-04 15:33:17 -07:00
llc_c_st.h
llc: Constify struct llc_conn_state_trans
2024-07-15 08:51:01 -07:00
llc_conn.h
llc: Check netns in llc_estab_match() and llc_listener_match().
2023-07-20 10:46:28 +02:00
llc_if.h
…
llc_pdu.h
net: Correct spelling in headers
2024-08-26 09:37:23 -07:00
llc_s_ac.h
…
llc_s_ev.h
…
llc_s_st.h
llc: Constify struct llc_sap_state_trans
2024-07-15 08:51:19 -07:00
llc_sap.h
…
llc.h
…
lwtunnel.h
net: dst: annotate data-races around dst->output
2025-07-02 14:32:30 -07:00
mac80211.h
wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure
2026-03-18 09:09:58 +01:00
mac802154.h
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
macsec.h
net: macsec: Add endianness annotations in salt struct
2025-01-20 12:20:42 +00:00
mctp.h
net: mctp: Allow limiting binds to a peer address
2025-07-15 12:08:39 +02:00
mctpdevice.h
net: mctp: Expose transport binding identifier via IFLA attribute
2024-11-09 09:04:54 -08:00
mip6.h
…
mld.h
…
mpls_iptunnel.h
…
mpls.h
…
mptcp.h
mptcp: sched: remove mptcp_sched_data
2025-04-15 08:21:46 -07:00
mrp.h
…
ncsi.h
…
ndisc.h
net: replace ND_PRINTK with dynamic debug
2025-07-10 15:27:32 -07:00
neighbour_tables.h
neighbour: Create netdev->neighbour association
2024-11-09 13:22:57 -08:00
neighbour.h
neighbour: Convert rwlock of struct neigh_table to spinlock.
2025-10-24 17:57:20 -07:00
net_debug.h
Merge tag 'kbuild-v6.13' of git://git.kernel.org/pub/scm/linux/kernel/git/masahiroy/linux-kbuild
2024-11-30 13:41:50 -08:00
net_failover.h
…
net_namespace.h
netns: optimize netns cleaning by batching unhash_nsid calls
2026-02-06 20:01:31 -08:00
net_ratelimit.h
…
net_shaper.h
net-shapers: implement NL get operation
2024-10-10 08:30:22 -07:00
net_trackers.h
…
netdev_lock.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-05-22 09:42:41 -07:00
netdev_netlink.h
net: add granular lock for the netdev netlink socket
2025-03-12 13:32:35 -07:00
netdev_queues.h
net: add queue config validation callback
2026-01-23 11:49:02 -08:00
netdev_rx_queue.h
Revert "Merge branch 'netkit-support-for-io_uring-zero-copy-and-af_xdp'"
2026-01-20 18:06:01 -08:00
netevent.h
…
netkit.h
bpf, netkit: Add indirect call wrapper for fetching peer dev
2023-11-20 10:15:16 -08:00
netlabel.h
Merge tag 'net-next-6.13' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2024-11-21 08:28:08 -08:00
netlink.h
netlink: introduce type-checking attribute iteration for nlmsg
2025-07-02 15:39:04 -07:00
netmem.h
net: inline get_netmem() and put_netmem()
2026-01-25 13:18:53 -08:00
netprio_cgroup.h
…
netrom.h
…
nexthop.h
ipv6: Protect nh->f6i_list with spinlock and flag.
2025-04-24 09:29:56 +02:00
nl802154.h
nl802154: fix some kernel-doc warnings
2025-10-20 17:13:40 -07:00
nsh.h
net: NSH: fix kernel-doc notation warning
2023-07-14 20:39:29 -07:00
pfcp.h
net: pfcp: fix typo in message_priority field name
2025-06-13 18:17:08 -07:00
pie.h
pie: fix kernel-doc notation warning
2023-07-14 20:39:30 -07:00
ping.h
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
pkt_cls.h
net: sched: fix TCF_LAYER_TRANSPORT handling in tcf_get_base_ptr()
2025-11-24 18:53:14 -08:00
pkt_sched.h
net/sched: don't use dynamic lockdep keys with clsact/ingress/noqueue
2026-02-05 09:32:45 -08:00
pptp.h
net: add missing includes and forward declarations under net/
2022-07-22 12:53:22 +01:00
proto_memory.h
net: Allow opt-out from global protocol memory accounting.
2025-10-16 12:04:47 -07:00
protocol.h
ipv6: move tcp_ipv6_hash_secret and udp_ipv6_hash_secret to net_hotdata
2024-03-07 21:12:43 -08:00
psample.h
net: psample: fix flag being set in wrong skb
2024-07-11 18:11:31 -07:00
psnap.h
…
psp.h
psp: base PSP device support
2025-09-18 12:32:06 +02:00
raw.h
net: use NUMA drop counters for softnet_data.dropped
2025-09-14 11:35:17 -07:00
rawv6.h
…
red.h
net: sched: Correct spelling in headers
2024-08-26 09:37:23 -07:00
regulatory.h
net: Correct spelling in headers
2024-08-26 09:37:23 -07:00
request_sock.h
tcp: move __reqsk_free() out of line
2026-02-05 09:23:06 -08:00
rose.h
net: rose: convert 'use' field to refcount_t
2025-08-27 07:43:08 -07:00
route.h
net: use dst_dev_rcu() in sk_setup_caps()
2025-08-29 19:36:32 -07:00
rpl.h
…
rps.h
net: Add rfs_needed() helper
2025-09-03 15:08:20 -07:00
rsi_91x.h
rsi: remove kernel-doc comment marker
2023-07-14 20:39:30 -07:00
rstreason.h
net: Retire DCCP socket.
2025-04-11 18:58:10 -07:00
rtnetlink.h
rtnetlink: Remove "net" from newlink params
2025-02-21 15:28:03 -08:00
rtnh.h
…
sch_generic.h
clsact: Fix use-after-free in init/destroy rollback asymmetry
2026-03-17 12:09:16 +01:00
sch_priv.h
net/sched: Export mq functions for reuse
2026-01-13 11:54:29 +01:00
scm.h
af_unix/scm: fix whitespace errors
2025-07-04 09:32:35 +02:00
secure_seq.h
tcp: secure_seq: add back ports to TS offset
2026-03-04 17:44:35 -08:00
seg6_hmac.h
ipv6: sr: Prepare HMAC key ahead of time
2025-08-26 18:11:29 -07:00
seg6_local.h
seg6: Use nested-BH locking for seg6_bpf_srh_states.
2024-06-24 16:41:23 -07:00
seg6.h
ipv6: sr: restruct ifdefines
2024-05-30 18:29:38 -07:00
selftests.h
net: selftests: export packet creation helpers for driver use
2025-11-06 13:38:11 +01:00
slhc_vj.h
…
smc.h
net/smc: bpf: Introduce generic hook for handshake flow
2025-11-10 11:19:41 -08:00
snmp.h
net: snmp: remove SNMP_MIB_SENTINEL
2025-09-08 18:06:21 -07:00
sock_reuseport.h
net: core: annotate socks of struct sock_reuseport with __counted_by
2024-08-02 17:16:59 -07:00
sock.h
net: Drop the lock in skb_may_tx_timestamp()
2026-02-24 11:27:29 +01:00
Space.h
net: appletalk: remove cops support
2023-10-04 11:49:20 -07:00
stp.h
…
strparser.h
strparser: Remove unused __strp_unpause
2025-05-05 16:48:12 -07:00
switchdev.h
net: bridge: switchdev: Skip MDB replays of deferred events on offload
2024-02-16 09:36:37 +00:00
tc_wrapper.h
Merge branch 'x86/bugs' into x86/core, to pick up pending changes before dependent patches
2024-02-14 10:49:37 +01:00
tcp_ao.h
tcp: Free TCP-AO/TCP-MD5 info/keys without RCU
2025-09-11 19:05:56 -07:00
tcp_ecn.h
tcp: accecn: add tcpi_ecn_mode and tcpi_option2 in tcp_info
2026-02-03 15:13:25 +01:00
tcp_states.h
tcp: Dump bound-only sockets in inet_diag.
2023-12-04 14:45:26 -08:00
tcp.h
tcp: secure_seq: add back ports to TS offset
2026-03-04 17:44:35 -08:00
tcx.h
bpf: Remove location field in tcx_link
2025-07-11 11:00:57 -07:00
timewait_sock.h
tcp: Remove timewait_sock_ops.twsk_destructor().
2025-08-25 17:53:35 -07:00
tipc.h
…
tls_prot.h
net/tls: Add TLS Alert definitions
2023-07-28 14:07:59 -07:00
tls_toe.h
…
tls.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-10-31 06:46:03 -07:00
transp_v6.h
inet6: Remove unused function declaration udpv6_connect()
2023-08-01 15:06:27 -07:00
tso.h
…
tun_proto.h
…
udp_tunnel.h
udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n
2026-03-18 18:00:07 -07:00
udp.h
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
udplite.h
udplite: fix various data-races
2023-09-14 16:16:36 +02:00
vsock_addr.h
net: Convert proto_ops connect() callbacks to use sockaddr_unsized
2025-11-04 19:10:32 -08:00
vxlan.h
vxlan: Support MC routing in the underlay
2025-06-17 18:18:46 -07:00
wext.h
…
x25.h
net/x25: Remove unused x25_terminate_link()
2025-07-14 17:19:13 -07:00
x25device.h
…
xdp_priv.h
…
xdp_sock_drv.h
xsk: introduce helper to determine rxq->frag_size
2026-03-05 08:02:03 -08:00
xdp_sock.h
xsk: add indirect call for xsk_destruct_skb
2025-11-11 10:21:08 +01:00
xdp.h
Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
2025-09-24 10:22:37 -07:00
xfrm.h
xfrm: reduce struct sec_path size
2026-02-10 20:21:48 -08:00
xsk_buff_pool.h
xsk: move cq_cached_prod_lock to avoid touching a cacheline in sending path
2026-01-15 10:07:45 +01:00