Ilya Maximets be80768d4f net: openvswitch: fix nested key length validation in the set() action ...

[ Upstream commit 65d91192aa ]

It's not safe to access nla_len(ovs_key) if the data is smaller than
the netlink header.  Check that the attribute is OK first.

Fixes: ccb1352e76 ("net: Add Open vSwitch kernel components.")
Reported-by: syzbot+b07a9da40df1576b8048@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=b07a9da40df1576b8048
Tested-by: syzbot+b07a9da40df1576b8048@syzkaller.appspotmail.com
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
Reviewed-by: Eelco Chaudron <echaudro@redhat.com>
Acked-by: Aaron Conole <aconole@redhat.com>
Link: https://patch.msgid.link/20250412104052.2073688-1-i.maximets@ovn.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-04-25 10:47:43 +02:00

..

actions.c

tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().

2025-04-10 14:39:34 +02:00

conntrack.c

Revert "openvswitch: switch to per-action label counting in conntrack"

2025-03-22 12:54:13 -07:00

conntrack.h

…

datapath.c

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

2025-02-21 14:01:43 +01:00

datapath.h

Revert "openvswitch: switch to per-action label counting in conntrack"

2025-03-22 12:54:13 -07:00

dp_notify.c

…

drop.h

…

flow_netlink.c

net: openvswitch: fix nested key length validation in the set() action

2025-04-25 10:47:43 +02:00

flow_netlink.h

…

flow_table.c

…

flow_table.h

…

flow.c

net: openvswitch: fix overwriting ct original tuple for ICMPv6

2024-05-10 19:24:07 -07:00

flow.h

…

Kconfig

net: openvswitch: add psample action

2024-07-05 17:45:47 -07:00

Makefile

…

meter.c

…

meter.h

…

openvswitch_trace.c

…

openvswitch_trace.h

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

vport-geneve.c

…

vport-gre.c

…

vport-internal_dev.c

netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local

2024-09-03 11:36:43 +02:00

vport-internal_dev.h

…

vport-netdev.c

net: openvswitch: Release reference to netdev

2024-04-24 17:07:17 -07:00

vport-netdev.h

…

vport-vxlan.c

…

vport.c

net: openvswitch: store sampling probability in cb.

2024-07-05 17:45:47 -07:00

vport.h

…