averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2025-12-22 12:17:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2a5c0fdc70cd653741e910e92ffeb2fa7376db07
linux-stable-mirror/include/net
History
Duoming Zhou 87563a043c ax25: fix reference count leaks of ax25_dev 
The previous commit d01ffb9eee ("ax25: add refcount in ax25_dev
to avoid UAF bugs") introduces refcount into ax25_dev, but there
are reference leak paths in ax25_ctl_ioctl(), ax25_fwd_ioctl(),
ax25_rt_add(), ax25_rt_del() and ax25_rt_opt().

This patch uses ax25_dev_put() and adjusts the position of
ax25_addr_ax25dev() to fix reference cout leaks of ax25_dev.

Fixes: d01ffb9eee ("ax25: add refcount in ax25_dev to avoid UAF bugs")
Signed-off-by: Duoming Zhou <duoming@zju.edu.cn>
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20220203150811.42256-1-duoming@zju.edu.cn
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2022-02-03 14:20:36 -08:00
..
9p
net/p9: load default transports
2022-01-10 10:00:09 +09:00
bluetooth
Bluetooth: hci_event: Rework hci_inquiry_result_with_rssi_evt
2022-01-06 14:57:09 +01:00
caif
net: remove the caif_hsi driver
2021-07-01 13:19:48 -07:00
iucv
net/af_iucv: Use struct_group() to zero struct iucv_sock region
2021-11-19 11:52:25 +00:00
netfilter
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
2022-01-09 15:59:23 -08:00
netns
Namespaceify mtu_expires sysctl
2022-01-04 12:40:22 +00:00
nfc
NFC: add NCI_UNREG flag to eliminate the race
2021-11-17 20:17:05 -08:00
phonet
…
sctp
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-01-05 14:36:10 -08:00
tc_act
flow_offload: add index to flow_action_entry structure
2021-12-19 14:08:47 +00:00
6lowpan.h
…
act_api.h
flow_offload: validate flags of filter and actions
2021-12-19 14:08:48 +00:00
addrconf.h
Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
2022-01-27 13:35:14 +00:00
af_ieee802154.h
…
af_rxrpc.h
afs: Don't truncate iter during data fetch
2021-04-23 10:17:26 +01:00
af_unix.h
af_unix: Replace the big lock with small locks.
2021-11-26 18:01:58 -08:00
af_vsock.h
af_vsock: rest of SEQPACKET support
2021-06-11 13:32:46 -07:00
ah.h
…
amt.h
amt: add mld report message handler
2021-11-01 13:36:09 +00:00
arp.h
neigh: introduce neigh_confirm() helper function
2021-11-23 11:51:37 +00:00
atmclip.h
…
ax25.h
ax25: fix reference count leaks of ax25_dev
2022-02-03 14:20:36 -08:00
ax88796.h
ax88796: export ax_NS8390_init() hook
2021-08-03 13:05:25 +01:00
bareudp.h
bareudp: Move definition of struct bareudp_conf to bareudp.c
2021-12-13 12:34:09 +00:00
bond_3ad.h
bonding: add new option lacp_active
2021-08-03 11:50:22 +01:00
bond_alb.h
bonding: make tx_rebalance_counter an atomic
2021-12-03 14:16:48 +00:00
bond_options.h
Bonding: add arp_missed_max option
2021-11-30 12:15:58 +00:00
bonding.h
bonding: use rcu_dereference_rtnl when get bonding active slave
2022-01-24 11:57:38 +00:00
bpf_sk_storage.h
bpf: struct sock is declared twice in bpf_sk_storage header
2021-03-26 17:43:55 +01:00
busy_poll.h
tcp: fix another uninit-value (sk_rx_queue_mapping)
2021-12-03 14:15:49 +00:00
calipso.h
…
cfg80211-wext.h
…
cfg80211.h
nl80211: Add support to set AP settings flags with single attribute
2021-12-20 10:41:26 +01:00
cfg802154.h
…
checksum.h
net: fix recent csum changes
2021-12-06 16:26:46 -08:00
cipso_ipv4.h
…
cls_cgroup.h
…
codel_impl.h
codel: remove unnecessary sock.h include
2021-12-22 15:03:47 -08:00
codel_qdisc.h
codel: remove unnecessary pkt_sched.h include
2021-12-22 15:03:51 -08:00
codel.h
codel: remove unnecessary pkt_sched.h include
2021-12-22 15:03:51 -08:00
compat.h
net/ipv4/ipv6: Replace one-element arraya with flexible-array members
2021-08-05 11:46:42 +01:00
datalink.h
llc/snap: constify dev_addr passing
2021-10-13 09:40:46 -07:00
dcbevent.h
…
dcbnl.h
…
devlink.h
devlink: Add new "event_eq_size" generic device param
2021-12-21 19:08:54 -08:00
dn_dev.h
…
dn_fib.h
net: convert fib_treeref from int to refcount_t
2021-07-30 15:33:24 +02:00
dn_neigh.h
…
dn_nsp.h
…
dn_route.h
…
dn.h
decnet: constify dev_addr passing
2021-10-13 09:40:46 -07:00
dsa.h
net: dsa: warn about dsa_port and dsa_switch bit fields being non atomic
2022-01-06 12:16:21 +00:00
dsfield.h
…
dst_cache.h
wireguard: device: reset peer src endpoint when netns exits
2021-11-29 19:50:45 -08:00
dst_metadata.h
net: validate lwtstate->data before returning from skb_tunnel_info()
2021-07-09 13:55:53 -07:00
dst_ops.h
…
dst.h
net: dst: add net device refcount tracking to dst_entry
2021-12-06 16:05:10 -08:00
erspan.h
…
esp.h
…
espintcp.h
…
ethoc.h
…
failover.h
net: failover: add net device refcount tracker
2021-12-06 16:06:02 -08:00
fib_notifier.h
…
fib_rules.h
fib: expand fib_rule_policy
2021-12-16 07:18:35 -08:00
firewire.h
…
flow_dissector.h
cls_flower: Fix inability to match GRE/IPIP packets
2021-10-29 14:03:22 +01:00
flow_offload.h
flow_offload: allow user to offload tc action to net device
2021-12-19 14:08:48 +00:00
flow.h
flow: fix object-size-mismatch warning in flowi{4,6}_to_flowi_common()
2021-09-02 11:44:19 +01:00
fou.h
…
fq_impl.h
…
fq.h
…
garp.h
…
gen_stats.h
net: sched: Remove Qdisc::running sequence counter
2021-10-18 12:54:41 +01:00
genetlink.h
mptcp: avoid lock_fast usage in accept path
2021-02-12 16:31:46 -08:00
geneve.h
…
gre.h
…
gro_cells.h
…
gro.h
net: fix recent csum changes
2021-12-06 16:26:46 -08:00
gtp.h
…
gue.h
…
hwbm.h
…
icmp.h
ipv6: ICMPV6: add response to ICMPV6 RFC 8335 PROBE messages
2021-06-28 14:29:45 -07:00
ieee80211_radiotap.h
mac80211: Use flex-array for radiotap header bitmap
2021-08-13 09:58:25 +02:00
ieee802154_netdev.h
…
if_inet6.h
ipv6: add net device refcount tracker to struct inet6_dev
2021-12-06 16:05:11 -08:00
ife.h
…
ila.h
…
inet6_connection_sock.h
…
inet6_hashtables.h
…
inet_common.h
…
inet_connection_sock.h
dccp/tcp: Remove an unused argument in inet_csk_listen_start().
2021-11-23 20:16:18 -08:00
inet_ecn.h
net: add skb_get_dsfield() helper
2021-10-15 11:33:08 +01:00
inet_frag.h
inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
2022-01-13 13:06:05 +00:00
inet_hashtables.h
tcp: seq_file: Replace listening_hash with lhash2
2021-07-23 16:44:57 -07:00
inet_sock.h
ipv4/raw: support binding to nonlocal addresses
2021-11-17 20:21:52 -08:00
inet_timewait_sock.h
…
inetpeer.h
…
ioam6.h
ipv6: ioam: Distinguish input and output for hop-limit
2021-10-04 12:53:35 +01:00
ip6_checksum.h
net: move gro definitions to include/net/gro.h
2021-11-16 13:16:54 +00:00
ip6_fib.h
ipv6: annotate accesses to fn->fn_sernum
2022-01-20 20:18:37 -08:00
ip6_route.h
ipv6: ip6_skb_dst_mtu() cleanups
2021-11-19 20:09:55 -08:00
ip6_tunnel.h
ipv6: add net device refcount tracker to struct ip6_tnl
2021-12-06 16:05:11 -08:00
ip_fib.h
inet: add net device refcount tracker to struct fib_nh_common
2021-12-07 20:44:59 -08:00
ip_tunnels.h
sit: add net device refcount tracking to ip_tunnel
2021-12-06 16:05:11 -08:00
ip_vs.h
ipvs: add sysctl_run_estimation to support disable estimation
2021-10-07 19:52:58 +02:00
ip.h
ipv4: avoid using shared IP generator for connected sockets
2022-01-27 08:37:02 -08:00
ipcomp.h
…
ipconfig.h
…
ipv6_frag.h
inet: frags: annotate races around fqdir->dead and fqdir->high_thresh
2022-01-13 13:06:05 +00:00
ipv6_stubs.h
net: ipv6: add fib6_nh_release_dsts stub
2021-11-22 15:44:49 +00:00
ipv6.h
net: Don't include filter.h from net/sock.h
2021-12-29 08:48:14 -08:00
iw_handler.h
…
kcm.h
…
l3mdev.h
…
lag.h
…
lapb.h
net: lapb: Make "lapb_t1timer_running" able to detect an already running timer
2021-03-23 14:14:50 -07:00
lib80211.h
…
llc_c_ac.h
…
llc_c_ev.h
…
llc_c_st.h
…
llc_conn.h
llc: add net device refcount tracker
2021-12-07 20:44:59 -08:00
llc_if.h
llc/snap: constify dev_addr passing
2021-10-13 09:40:46 -07:00
llc_pdu.h
net: llc: fix skb_over_panic
2021-07-27 13:05:56 +01:00
llc_s_ac.h
…
llc_s_ev.h
…
llc_s_st.h
…
llc_sap.h
…
llc.h
llc: fix out-of-bound array index in llc_sk_dev_hash()
2021-11-07 19:25:29 +00:00
lwtunnel.h
netfilter: add netfilter hooks to SRv6 data plane
2021-08-30 01:51:36 +02:00
mac80211.h
mac80211: Add stations iterator where the iterator function may sleep
2022-01-04 15:47:15 +01:00
mac802154.h
…
macsec.h
net: macsec: fix the length used to copy the key for offloading
2021-06-24 12:41:12 -07:00
mctp.h
mctp: Pass flow data & flow release events to drivers
2021-10-29 13:23:51 +01:00
mctpdevice.h
mctp: Pass flow data & flow release events to drivers
2021-10-29 13:23:51 +01:00
mip6.h
…
mld.h
mld: add new workqueues for process mld events
2021-03-26 15:14:56 -07:00
mpls_iptunnel.h
…
mpls.h
…
mptcp.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-10-28 10:43:58 -07:00
mrp.h
…
ncsi.h
…
ndisc.h
neigh: introduce neigh_confirm() helper function
2021-11-23 11:51:37 +00:00
neighbour.h
net, neigh: Do not trigger immediate probes on NUD_FAILED from neigh_managed_work
2022-02-02 20:30:18 -08:00
net_failover.h
…
net_namespace.h
net: add networking namespace refcount tracker
2021-12-10 06:38:26 -08:00
net_ratelimit.h
…
net_trackers.h
net: add networking namespace refcount tracker
2021-12-10 06:38:26 -08:00
netevent.h
…
netlabel.h
…
netlink.h
net: netlink: add the case when nlh is NULL
2021-07-27 11:43:50 +01:00
netprio_cgroup.h
…
netrom.h
…
nexthop.h
net: ipv4: Fix rtnexthop len when RTA_FLOW is present
2021-09-24 14:07:10 +01:00
nl802154.h
net: ieee802154: handle iftypes as u32
2021-11-16 18:02:46 +01:00
nsh.h
…
p8022.h
…
page_pool.h
page_pool: Store the XDP mem id
2022-01-05 19:46:32 -08:00
pie.h
…
ping.h
…
pkt_cls.h
net: sched: do not allocate a tracker in tcf_exts_init()
2022-01-11 20:40:16 -08:00
pkt_sched.h
net: openvswitch: Fix ct_state nat flags for conns arriving from tc
2022-01-09 16:24:12 -08:00
pptp.h
…
protocol.h
net: Remove the member netns_ok
2021-05-17 15:29:35 -07:00
psample.h
psample: Add a fwd declaration for skbuff
2021-08-09 15:34:21 -07:00
psnap.h
…
raw.h
…
rawv6.h
…
red.h
sch_red: fix off-by-one checks in red_check_params()
2021-03-25 17:40:43 -07:00
regulatory.h
…
request_sock.h
…
rose.h
rose: constify dev_addr passing
2021-10-13 09:40:45 -07:00
route.h
ipv4: remove sparse error in ip_neigh_gw4()
2022-01-27 08:38:33 -08:00
rpl.h
…
rsi_91x.h
…
rtnetlink.h
net: add extack arg for link ops
2021-08-04 10:01:26 +01:00
rtnh.h
…
sch_generic.h
net_sched: restore "mpu xxx" handling
2022-01-13 11:06:42 -08:00
scm.h
…
secure_seq.h
…
seg6_hmac.h
…
seg6_local.h
…
seg6.h
udp6: Use Segment Routing Header for dest address if present
2022-01-04 12:17:35 +00:00
selftests.h
net: selftest: fix build issue if INET is disabled
2021-04-28 14:06:45 -07:00
slhc_vj.h
…
smc.h
…
snmp.h
…
sock_reuseport.h
tcp: Add reuseport_migrate_sock() to select a new listener.
2021-06-15 18:01:05 +02:00
sock.h
net: bpf: Handle return value of BPF_CGROUP_RUN_PROG_INET{4,6}_POST_BIND()
2022-01-06 17:08:35 -08:00
Space.h
wan: remove sbni/granch driver
2021-08-03 13:05:26 +01:00
stp.h
…
strparser.h
bpf, sockmap: sk_skb data_end access incorrect when src_reg = dst_reg
2021-11-09 01:05:34 +01:00
switchdev.h
net: switchdev: merge switchdev_handle_fdb_{add,del}_to_device
2021-10-27 14:54:02 +01:00
tcp_states.h
…
tcp.h
tcp: Add a stub for sk_defer_free_flush()
2022-01-20 20:17:32 -08:00
timewait_sock.h
…
tipc.h
…
tls_toe.h
…
tls.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2021-10-28 10:43:58 -07:00
transp_v6.h
…
tso.h
…
tun_proto.h
…
udp_tunnel.h
…
udp.h
net: move gro definitions to include/net/gro.h
2021-11-16 13:16:54 +00:00
udplite.h
…
vsock_addr.h
…
vxlan.h
net: vxlan: add macro definition for number of IANA VXLAN-GPE port
2021-11-29 12:19:53 +00:00
wext.h
…
x25.h
…
x25device.h
…
xdp_priv.h
xsk: Wipe out dead zero_copy_allocator declarations
2021-12-14 00:24:24 +01:00
xdp_sock_drv.h
xsk: Batched buffer allocation for the pool
2021-09-28 00:18:34 +02:00
xdp_sock.h
net: Don't include filter.h from net/sock.h
2021-12-29 08:48:14 -08:00
xdp.h
xdp: Allow registering memory model without rxq reference
2022-01-05 19:46:32 -08:00
xfrm.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2022-01-09 17:00:17 -08:00
xsk_buff_pool.h
xsk: Optimize for aligned case
2021-09-28 00:18:35 +02:00