MoYuanhaoandGreg Kroah-Hartman e681c5a824 tcp: check space before adding MPTCP SYN options ...

commit 06d64ab46f upstream.

Ensure there is enough space before adding MPTCP options in
tcp_syn_options().

Without this check, 'remaining' could underflow, and causes issues. If
there is not enough space, MPTCP should not be used.

Signed-off-by: MoYuanhao <moyuanhao3676@163.com>
Fixes: cec37a6e41 ("mptcp: Handle MP_CAPABLE options for outgoing connections")
Cc: stable@vger.kernel.org
Acked-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
[ Matt: Add Fixes, cc Stable, update Description ]
Signed-off-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20241209-net-mptcp-check-space-syn-v1-1-2da992bb6f74@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-12-19 18:08:48 +01:00

..

bpfilter

…

netfilter

netfilter: fib: check correct rtable in vrf setups

2024-10-17 15:22:22 +02:00

af_inet.c

net: inet: do not leave a dangling sk pointer in inet_create()

2024-12-14 19:54:41 +01:00

ah4.c

…

arp.c

arp: Prevent overflow in arp_req_get().

2024-03-01 13:26:39 +01:00

bpf_tcp_ca.c

…

cipso_ipv4.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

datagram.c

ipv4: fix data-races around inet->inet_id

2023-08-30 16:11:02 +02:00

devinet.c

ipv4: give an IPv4 dev to blackhole_netdev

2024-11-01 01:55:58 +01:00

esp4_offload.c

xfrm: Linearize the skb after offloading if needed.

2023-06-28 11:12:29 +02:00

esp4.c

net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP

2024-08-03 08:49:03 +02:00

fib_frontend.c

ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family

2024-10-17 15:21:38 +02:00

fib_lookup.h

…

fib_notifier.c

…

fib_rules.c

…

fib_semantics.c

ipv4: fix source address selection with route leak

2024-08-03 08:49:31 +02:00

fib_trie.c

ipv4: Fix incorrect TOS in route get reply

2024-08-03 08:49:24 +02:00

fou.c

fou: fix initialization of grc

2024-09-18 19:23:05 +02:00

gre_demux.c

…

gre_offload.c

…

icmp.c

icmp: change the order of rate limits

2024-10-17 15:21:27 +02:00

igmp.c

ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet

2023-12-08 08:51:17 +01:00

inet_connection_sock.c

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

2024-12-14 19:53:52 +01:00

inet_diag.c

sock_diag: allow concurrent operation in sock_diag_rcv_msg()

2024-12-14 19:53:33 +01:00

inet_fragment.c

inet: inet_defrag: prevent sk release while still in use

2024-04-10 16:28:23 +02:00

inet_hashtables.c

net: remove duplicate reuseport_lookup functions

2024-06-12 11:03:12 +02:00

inet_timewait_sock.c

tcp/dccp: do not care about families in inet_twsk_purge()

2024-08-29 17:30:44 +02:00

inetpeer.c

…

ip_forward.c

…

ip_fragment.c

inet: inet_defrag: prevent sk release while still in use

2024-04-10 16:28:23 +02:00

ip_gre.c

ipv4: ip_gre: Fix drops of small packets in ipgre_xmit

2024-10-17 15:21:32 +02:00

ip_input.c

ipv4: ignore dst hint for multipath routes

2023-09-19 12:28:01 +02:00

ip_options.c

…

ip_output.c

net-timestamp: make sk_tskey more predictable in error path

2024-12-14 19:54:21 +01:00

ip_sockglue.c

ipmr: fix kernel panic when forwarding mcast packets

2024-02-05 20:13:00 +00:00

ip_tunnel_core.c

tunnels: fix out of bounds access when building IPv6 PMTU error

2024-02-16 19:06:26 +01:00

ip_tunnel.c

net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()

2024-03-26 18:20:41 -04:00

ip_vti.c

ip_vti: fix potential slab-use-after-free in decode_session6

2023-08-23 17:52:32 +02:00

ipcomp.c

…

ipconfig.c

…

ipip.c

…

ipmr_base.c

ipmr: Fix access to mfc_cache_list without lock held

2024-12-14 19:53:11 +01:00

ipmr.c

ipmr: fix tables suspicious RCU usage

2024-12-14 19:53:52 +01:00

Kconfig

…

Makefile

…

metrics.c

…

netfilter.c

…

netlink.c

…

nexthop.c

net: nexthop: Initialize all fields in dumped nexthops

2024-08-03 08:49:50 +02:00

ping.c

ping: Fix potentail NULL deref for /proc/net/icmp.

2023-04-13 16:55:24 +02:00

proc.c

icmp: Add counters for rate limits

2024-10-17 15:21:27 +02:00

protocol.c

…

raw_diag.c

…

raw.c

ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels

2024-03-26 18:21:00 -04:00

route.c

ipv4: Fix incorrect source address in Record Route option

2024-08-03 08:49:49 +02:00

syncookies.c

tcp: fix cookie_init_timestamp() overflows

2023-11-20 11:51:54 +01:00

sysctl_net_ipv4.c

tcp: enforce receive buffer memory limits by allowing the tcp window to shrink

2023-10-19 23:08:54 +02:00

tcp_bbr.c

…

tcp_bic.c

…

tcp_bpf.c

tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg

2024-12-14 19:54:30 +01:00

tcp_cdg.c

…

tcp_cong.c

…

tcp_cubic.c

…

tcp_dctcp.c

tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

2024-06-12 11:03:51 +02:00

tcp_dctcp.h

…

tcp_diag.c

…

tcp_fastopen.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe

2024-10-17 15:22:19 +02:00

tcp_ipv4.c

tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process

2024-10-17 15:21:39 +02:00

tcp_lp.c

…

tcp_metrics.c

tcp_metrics: validate source addr length

2024-07-11 12:47:11 +02:00

tcp_minisocks.c

tcp: do not export tcp_twsk_purge()

2024-08-29 17:30:51 +02:00

tcp_nv.c

…

tcp_offload.c

net: drop bad gso csum_start and offset in virtio_net_hdr

2024-08-29 17:30:54 +02:00

tcp_output.c

tcp: check space before adding MPTCP SYN options

2024-12-19 18:08:48 +01:00

tcp_rate.c

…

tcp_recovery.c

tcp: fix excessive TLP and RACK timeouts from HZ rounding

2023-10-25 12:03:06 +02:00

tcp_scalable.c

…

tcp_timer.c

tcp: fix race in tcp_write_err()

2024-08-03 08:49:04 +02:00

tcp_ulp.c

…

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

tunnel4.c

…

udp_bpf.c

…

udp_diag.c

…

udp_impl.h

…

udp_offload.c

gso: fix udp gso fraglist segmentation after pull from frag_list

2024-10-17 15:22:00 +02:00

udp_tunnel_core.c

udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO

2024-01-10 17:10:28 +01:00

udp_tunnel_nic.c

…

udp_tunnel_stub.c

…

udp.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

udplite.c

udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

2023-05-30 14:03:20 +01:00

xfrm4_input.c

xfrm: Preserve vlan tags for transport mode software GRO

2024-05-17 11:56:10 +02:00

xfrm4_output.c

…

xfrm4_policy.c

xfrm: respect ip protocols rules criteria when performing dst lookups

2024-11-01 01:56:03 +01:00

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…