Alex Henrie 5d2d3f2300 net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr ...

[ Upstream commit f31867d0d9 ]

The existing code incorrectly casted a negative value (the result of a
subtraction) to an unsigned value without checking. For example, if
/proc/sys/net/ipv6/conf/*/temp_prefered_lft was set to 1, the preferred
lifetime would jump to 4 billion seconds. On my machine and network the
shortest lifetime that avoided underflow was 3 seconds.

Fixes: 76506a986d ("IPv6: fix DESYNC_FACTOR")
Signed-off-by: Alex Henrie <alexhenrie24@gmail.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-09-19 12:22:58 +02:00

..

ila

ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()

2023-03-17 08:48:54 +01:00

netfilter

netfilter: tproxy: fix deadlock due to missing BH disable

2023-03-17 08:48:55 +01:00

addrconf_core.c

…

addrconf.c

net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr

2023-09-19 12:22:58 +02:00

addrlabel.c

ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network

2022-11-16 09:58:18 +01:00

af_inet6.c

dccp: Call inet6_destroy_sock() via sk->sk_destruct().

2023-04-26 13:51:54 +02:00

ah6.c

…

anycast.c

…

calipso.c

…

datagram.c

ipv6: Fix datagram socket connection with DSCP.

2023-02-22 12:57:09 +01:00

esp6_offload.c

xfrm: Linearize the skb after offloading if needed.

2023-06-28 10:29:46 +02:00

esp6.c

…

exthdrs_core.c

ipv6: Fix out-of-bounds access in ipv6_find_tlv()

2023-05-30 13:55:31 +01:00

exthdrs_offload.c

…

exthdrs.c

ipv6: rpl: Fix Route of Death.

2023-06-14 11:13:02 +02:00

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

…

icmp.c

icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().

2023-07-23 13:47:41 +02:00

inet6_connection_sock.c

…

inet6_hashtables.c

ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH()

2022-08-17 14:23:36 +02:00

ioam6_iptunnel.c

…

ioam6.c

…

ip6_checksum.c

…

ip6_fib.c

…

ip6_flowlabel.c

…

ip6_gre.c

net:ipv6: check return value of pskb_trim()

2023-07-27 08:47:01 +02:00

ip6_icmp.c

…

ip6_input.c

tcp/udp: Make early_demux back namespacified.

2022-11-10 18:15:38 +01:00

ip6_offload.c

…

ip6_offload.h

…

ip6_output.c

lwt: Check LWTUNNEL_XMIT_CONTINUE strictly

2023-09-19 12:22:34 +02:00

ip6_tunnel.c

net: tunnels: annotate lockless accesses to dev->needed_headroom

2023-03-22 13:31:26 +01:00

ip6_udp_tunnel.c

…

ip6_vti.c

ip6_vti: fix slab-use-after-free in decode_session6

2023-08-26 14:23:32 +02:00

ip6mr.c

ip6mr: Fix skb_under_panic in ip6mr_cache_report()

2023-08-11 15:13:53 +02:00

ipcomp6.c

…

ipv6_sockglue.c

udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM).

2023-04-26 13:51:54 +02:00

Kconfig

…

Makefile

…

mcast_snoop.c

…

mcast.c

net: mld: fix reference count leak in mld_{query | report}_work()

2022-08-03 12:03:51 +02:00

mip6.c

…

ndisc.c

ipv6: adjust ndisc_is_useropt() to also return true for PIO

2023-08-16 18:21:57 +02:00

netfilter.c

…

output_core.c

…

ping.c

ping6: Fix send to link-local addresses with VRF.

2023-06-21 15:59:16 +02:00

proc.c

…

protocol.c

…

raw.c

ipv{4,6}/raw: fix output xfrm lookup wrt protocol

2023-06-05 09:21:26 +02:00

reassembly.c

…

route.c

ipv6: Add lwtunnel encap size of all siblings in nexthop calculation

2023-03-11 13:57:28 +01:00

rpl_iptunnel.c

…

rpl.c

net: rpl: fix rpl header size calculation

2023-04-26 13:51:49 +02:00

seg6_hmac.c

net: ipv6: unexport __init-annotated seg6_hmac_net_init()

2022-07-07 17:53:26 +02:00

seg6_iptunnel.c

seg6: fix skb checksum evaluation in SRH encapsulation/insertion

2022-07-21 21:24:30 +02:00

seg6_local.c

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

2022-07-21 21:24:30 +02:00

seg6.c

ipv6: sr: fix out-of-bounds read when setting HMAC data.

2022-09-15 11:30:06 +02:00

sit.c

sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()

2023-05-17 11:50:16 +02:00

syncookies.c

tcp: Fix data-races around sysctl_tcp_syncookies.

2022-07-29 17:25:18 +02:00

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp: annotate data-races around tcp_rsk(req)->ts_recent

2023-07-27 08:47:01 +02:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().

2023-04-26 13:51:54 +02:00

udp_offload.c

…

udp.c

ipv6: Add reasons for skb drops to __udp6_lib_rcv

2023-09-19 12:22:32 +02:00

udplite.c

udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

2023-05-30 13:55:31 +01:00

xfrm6_input.c

xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets

2023-06-28 10:29:46 +02:00

xfrm6_output.c

…

xfrm6_policy.c

xfrm: Fix ignored return value in xfrm6_init()

2022-12-02 17:41:06 +01:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…