Xiao Liang f5ba6d9d6b netfilter: nft_exthdr: Fix non-linear header modification ...

[ Upstream commit 28427f368f ]

Fix skb_ensure_writable() size. Don't use nft_tcp_header_pointer() to
make it explicit that pointers point to the packet (not local buffer).

Fixes: 99d1712bc4 ("netfilter: exthdr: tcp option set support")
Fixes: 7890cbea66 ("netfilter: exthdr: add support for tcp option removal")
Cc: stable@vger.kernel.org
Signed-off-by: Xiao Liang <shaw.leon@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-10-06 13:18:10 +02:00

..

6lowpan

…

9p

9p: virtio: make sure 'offs' is initialized in zc_request

2023-09-19 12:22:27 +02:00

802

…

8021q

…

appletalk

…

atm

atm: hide unused procfs functions

2023-06-09 10:32:26 +02:00

ax25

…

batman-adv

batman-adv: Hold rtnl lock during MTU update via netlink

2023-08-30 16:18:18 +02:00

bluetooth

Bluetooth: Fix potential use-after-free when clear keys

2023-09-19 12:22:33 +02:00

bpf

…

bpfilter

…

bridge

net: bridge: use DEV_STATS_INC()

2023-10-06 13:18:07 +02:00

caif

…

can

can: raw: add missing refcount for memory leak fix

2023-08-30 16:18:20 +02:00

ceph

libceph: fix potential hang in ceph_osdc_notify()

2023-08-11 15:13:55 +02:00

core

net/core: Fix ETH_P_1588 flow dissector

2023-10-06 13:18:05 +02:00

dcb

net: dcb: choose correct policy to parse DCB_ATTR_BCN

2023-08-11 15:13:53 +02:00

dccp

dccp: fix dccp_v4_err()/dccp_v6_err() again

2023-10-06 13:18:06 +02:00

dns_resolver

…

dsa

net: dsa: tag_sja1105: fix MAC DA patching from meta frames

2023-07-23 13:47:30 +02:00

ethernet

…

ethtool

…

hsr

hsr: Fix uninit-value access in fill_frame_info()

2023-09-19 12:23:03 +02:00

ieee802154

…

ife

…

ipv4

ipv4: fix null-deref in ipv4_link_failure

2023-10-06 13:18:06 +02:00

ipv6

net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr

2023-09-19 12:22:58 +02:00

iucv

…

kcm

kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().

2023-09-19 12:23:04 +02:00

key

net: af_key: fix sadb_x_filter validation

2023-08-26 14:23:32 +02:00

l2tp

…

l3mdev

…

lapb

…

llc

llc: Don't drop packet from non-root netns.

2023-07-27 08:47:02 +02:00

mac80211

wifi: mac80211: check S1G action frame size

2023-09-23 11:09:56 +02:00

mac802154

…

mctp

…

mpls

…

mptcp

mptcp: consolidate fallback and non fallback state machine

2023-07-05 18:25:04 +01:00

ncsi

net/ncsi: change from ndo_set_mac_address to dev_set_mac_address

2023-08-30 16:18:16 +02:00

netfilter

netfilter: nft_exthdr: Fix non-linear header modification

2023-10-06 13:18:10 +02:00

netlabel

netlabel: fix shift wrapping bug in netlbl_catmap_setlong()

2023-09-19 12:22:29 +02:00

netlink

netlink: Add __sock_i_ino() for __netlink_diag_dump().

2023-07-23 13:46:56 +02:00

netrom

netrom: Deny concurrent connect().

2023-09-19 12:22:35 +02:00

nfc

net: nfc: Fix use-after-free caused by nfc_llcp_find_local

2023-07-23 13:46:56 +02:00

nsh

…

openvswitch

…

packet

net/packet: annotate data-races around tp->status

2023-08-16 18:22:01 +02:00

phonet

…

psample

…

qrtr

…

rds

net: rds: Fix possible NULL-pointer dereference

2023-10-06 13:18:08 +02:00

rfkill

…

rose

…

rxrpc

…

sched

net/sched: Retire rsvp classifier

2023-09-23 11:10:03 +02:00

sctp

sctp: annotate data-races around sk->sk_wmem_queued

2023-09-19 12:22:58 +02:00

smc

net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add

2023-09-19 12:23:03 +02:00

strparser

…

sunrpc

NFSv4.1: fix pnfs MDS=DS session trunking

2023-10-06 13:18:00 +02:00

switchdev

…

tipc

tipc: stop tipc crypto on failure in tipc_node_create

2023-08-03 10:22:37 +02:00

tls

net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()

2023-09-19 12:23:04 +02:00

unix

af_unix: Fix data-race around unix_tot_inflight.

2023-09-19 12:22:59 +02:00

vmw_vsock

…

wireless

wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute

2023-09-19 12:22:34 +02:00

x25

…

xdp

xsk: Fix xsk_diag use-after-free error during socket cleanup

2023-09-19 12:22:58 +02:00

xfrm

xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH

2023-08-26 14:23:33 +02:00

compat.c

…

devres.c

…

Kconfig

Remove DECnet support from kernel

2023-06-21 15:59:15 +02:00

Makefile

Remove DECnet support from kernel

2023-06-21 15:59:15 +02:00

socket.c

net: Avoid address overwrite in kernel_connect

2023-09-19 12:22:30 +02:00

sysctl_net.c

…