Dmitry Kandybka 44b1bfb5bd mptcp: fix possible integer overflow in mptcp_reset_tout_timer ...

commit b169e76eba upstream.

In 'mptcp_reset_tout_timer', promote 'probe_timestamp' to unsigned long
to avoid possible integer overflow. Compile tested only.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Signed-off-by: Dmitry Kandybka <d.kandybka@gmail.com>
Link: https://patch.msgid.link/20241107103657.1560536-1-d.kandybka@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
[ Conflict in this version because commit d866ae9aaa ("mptcp: add a
  new sysctl for make after break timeout") is not in this version, and
  replaced TCP_TIMEWAIT_LEN in the expression. The fix can still be
  applied the same way: by forcing a cast to unsigned long for the first
  item. ]
Signed-off-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-12-09 10:31:42 +01:00

..

6lowpan

…

9p

9p: fix slab cache name creation for real

2024-11-17 15:08:59 +01:00

802

…

8021q

…

appletalk

…

atm

…

ax25

ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()

2024-06-21 14:38:14 +02:00

batman-adv

batman-adv: Don't accept TT entries for out-of-spec VIDs

2024-07-05 09:34:04 +02:00

bluetooth

Bluetooth: hci_core: Fix calling mgmt_device_connected

2024-11-22 15:38:32 +01:00

bpf

bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled

2024-11-08 16:28:19 +01:00

bpfilter

…

bridge

bridge: Handle error of rtnl_register_module().

2024-10-17 15:24:29 +02:00

caif

…

can

can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().

2024-10-04 16:28:58 +02:00

ceph

libceph: init the cursor when preparing sparse read in msgr2

2024-10-17 15:24:10 +02:00

core

bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6

2024-11-17 15:08:57 +01:00

dcb

…

dccp

tcp/dccp: do not care about families in inet_twsk_purge()

2024-08-29 17:33:46 +02:00

devlink

…

dns_resolver

…

dsa

net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events

2024-10-10 11:58:07 +02:00

ethernet

…

ethtool

ethtool: check device is present when getting link settings

2024-09-04 13:28:26 +02:00

handshake

…

hsr

…

ieee802154

…

ife

…

ipv4

ipmr: Fix access to mfc_cache_list without lock held

2024-12-09 10:31:40 +01:00

ipv6

netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()

2024-11-08 16:28:19 +01:00

iucv

s390/iucv: fix receive buffer virtual vs physical address confusion

2024-08-29 17:33:39 +02:00

kcm

kcm: Serialise kcm_sendmsg() for the same socket.

2024-08-29 17:33:46 +02:00

key

…

l2tp

genetlink: hold RCU in genlmsg_mcast()

2024-11-01 01:58:23 +01:00

l3mdev

…

lapb

…

llc

…

mac80211

mac80211: fix user-power when emulating chanctx

2024-12-09 10:31:36 +01:00

mac802154

mac802154: Fix potential RCU dereference issue in mac802154_scan_worker

2024-10-10 11:57:59 +02:00

mctp

mctp: Handle error of rtnl_register_module().

2024-10-17 15:24:29 +02:00

mpls

mpls: Handle error of rtnl_register_module().

2024-10-17 15:24:30 +02:00

mptcp

mptcp: fix possible integer overflow in mptcp_reset_tout_timer

2024-12-09 10:31:42 +01:00

ncsi

net/ncsi: Fix the multi thread manner of NCSI driver

2024-06-21 14:38:14 +02:00

netfilter

netfilter: nf_tables: wait for rcu grace period on net_device removal

2024-11-14 13:19:32 +01:00

netlabel

…

netlink

netlink: terminate outstanding dump on socket close

2024-11-22 15:38:30 +01:00

netrom

netrom: Fix a memory leak in nr_heartbeat_expiry()

2024-06-27 13:49:06 +02:00

nfc

nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies

2024-08-19 06:04:28 +02:00

nsh

…

openvswitch

net: ovs: fix ovs_drop_reasons error

2024-08-29 17:33:50 +02:00

packet

af_packet: Handle outgoing VLAN packets without hardware offloading

2024-08-03 08:54:13 +02:00

phonet

phonet: Handle error of rtnl_register_module().

2024-10-17 15:24:30 +02:00

psample

…

qrtr

net: qrtr: Update packets cloning when broadcasting

2024-10-04 16:29:41 +02:00

rds

net:rds: Fix possible deadlock in rds_message_put

2024-08-19 06:04:27 +02:00

rfkill

…

rose

…

rxrpc

rxrpc: Fix missing locking causing hanging calls

2024-11-14 13:19:32 +01:00

sched

net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for hnodes.

2024-11-22 15:38:32 +01:00

sctp

sctp: fix possible UAF in sctp_v6_available()

2024-11-22 15:38:30 +01:00

smc

net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid

2024-11-01 01:58:22 +01:00

strparser

…

sunrpc

sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()

2024-11-14 13:19:30 +01:00

switchdev

…

tipc

tipc: guard against string buffer overrun

2024-10-10 11:57:25 +02:00

tls

tls: fix missing memory barrier in tls_init

2024-06-12 11:12:50 +02:00

unix

af_unix: Remove put_pid()/put_cred() in copy_peercred().

2024-09-12 11:11:29 +02:00

vmw_vsock

virtio/vsock: Fix accept_queue memory leak

2024-11-22 15:38:32 +01:00

wireless

wifi: cfg80211: clear wdev->cqm_config pointer on free

2024-11-08 16:28:23 +01:00

x25

…

xdp

…

xfrm

xfrm: validate new SA's prefixlen using SA family when sel.family is unset

2024-11-01 01:58:34 +01:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

net: explicitly clear the sk pointer, when pf->create fails

2024-10-17 15:24:35 +02:00

sysctl_net.c

sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table)

2024-08-11 12:47:13 +02:00