averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-08-14 06:22:34 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
645d044d7e5c99079ff2b134bd35d3301be2ec79
linux-stable-mirror/net/ipv6
T
History
Eric Dumazet f996edd761 ipv6: fix possible UAF in icmpv6_rcv() 
Caching saddr and daddr before pskb_pull() is problematic
since skb->head can change.

Remove these temporary variables:

- We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr
  when net_dbg_ratelimited() is called in the slow path.

- Avoid potential future misuse after pskb_pull() call.

Fixes: 4b3418fba0 ("ipv6: icmp: include addresses in debug messages")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Fernando Fernandez Mancera <fmancera@suse.de>
Reviewed-by: Joe Damato <joe@dama.to>
Reviewed-by: Ido Schimmel <idosch@nvidia.com>
Link: https://patch.msgid.link/20260416103505.2380753-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-04-18 12:09:52 -07:00
..
ila
net: Add SPDX ids to some source files
2026-03-09 18:32:45 -07:00
netfilter
netfilter: require Ethernet MAC header before using eth_hdr()
2026-04-10 12:16:27 +02:00
addrconf_core.c
ipv6: remove ipv6_stub infrastructure completely
2026-03-29 11:21:24 -07:00
addrconf.c
Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2026-04-14 18:36:10 -07:00
addrlabel.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
af_inet6.c
tcp: update window_clamp when SO_RCVBUF is set
2026-04-13 15:32:35 +02:00
ah6.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
anycast.c
treewide: Replace kmalloc with kmalloc_obj for non-scalar types
2026-02-21 01:02:28 -08:00
calipso.c
Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses
2026-02-22 08:26:33 -08:00
datagram.c
Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2026-04-14 18:36:10 -07:00
esp6_offload.c
xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
2025-12-04 09:54:53 +01:00
esp6.c
esp: fix skb leak with espintcp and async crypto
2026-02-25 09:11:40 +01:00
exthdrs_core.c
…
exthdrs_offload.c
…
exthdrs.c
ipv6: add NULL checks for idev in SRv6 paths
2026-03-18 17:23:43 -07:00
fib6_notifier.c
net: Add SPDX ids to some source files
2026-03-09 18:32:45 -07:00
fib6_rules.c
ipv6: export fib6_lookup for nft_fib_ipv6
2026-03-04 11:45:44 +01:00
fou6.c
fou: Remove IPPROTO_UDPLITE check in gue_err() and gue6_err().
2026-03-17 16:10:59 -07:00
icmp.c
ipv6: fix possible UAF in icmpv6_rcv()
2026-04-18 12:09:52 -07:00
inet6_connection_sock.c
tcp: move inet6_csk_update_pmtu() to tcp_ipv6.c
2026-02-24 17:47:27 -08:00
inet6_hashtables.c
tcp: use __jhash_final() in inet6_ehashfn()
2026-03-29 11:45:48 -07:00
ioam6_iptunnel.c
ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()
2026-02-13 12:24:05 -08:00
ioam6.c
net: ioam6: fix OOB and missing lock
2026-04-08 19:08:56 -07:00
ip6_checksum.c
udp: Remove UDPLITE_SEND_CSCOV and UDPLITE_RECV_CSCOV.
2026-03-13 18:57:45 -07:00
ip6_fib.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-04-02 11:03:13 -07:00
ip6_flowlabel.c
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
2026-03-31 15:44:29 -07:00
ip6_gre.c
gre: Count GRE packet drops
2026-04-12 12:33:33 -07:00
ip6_icmp.c
ipv6: remove dynamic ICMPv6 sender registration infrastructure
2026-03-29 11:21:23 -07:00
ip6_input.c
tcp: move tcp_v6_early_demux() to net/ipv6/ip6_input.c
2026-03-05 18:33:51 -08:00
ip6_offload.c
ipv6: replace IS_BUILTIN(CONFIG_IPV6) with IS_ENABLED(CONFIG_IPV6)
2026-03-29 11:21:23 -07:00
ip6_offload.h
…
ip6_output.c
ipv6: move ip6_dst_hoplimit() to net/ipv6/ip6_output.c
2026-04-01 18:50:35 -07:00
ip6_tunnel.c
ip6_tunnel: use generic for_each_ip_tunnel_rcu macro
2026-04-06 18:41:03 -07:00
ip6_udp_tunnel.c
ipv6: remove ipv6_stub infrastructure completely
2026-03-29 11:21:24 -07:00
ip6_vti.c
…
ip6mr.c
ipmr/ip6mr: Convert net->ipv[46].ipmr_seq to atomic_t.
2026-03-02 18:49:41 -08:00
ipcomp6.c
…
ipv6_sockglue.c
ipv6: Remove UDP-Lite support for IPV6_ADDRFORM.
2026-03-13 18:57:44 -07:00
Kconfig
ipv6: convert CONFIG_IPV6 to built-in only and clean up Kconfigs
2026-03-29 11:21:22 -07:00
Makefile
ipv6: Retire UDP-Lite.
2026-03-13 18:57:44 -07:00
mcast_snoop.c
…
mcast.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
mip6.c
…
ndisc.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-04-02 11:03:13 -07:00
netfilter.c
netfilter: remove nf_ipv6_ops and use direct function calls
2026-03-29 11:21:24 -07:00
output_core.c
ipv6: move ip6_dst_hoplimit() to net/ipv6/ip6_output.c
2026-04-01 18:50:35 -07:00
ping.c
net: remove addr_len argument of recvmsg() handlers
2026-03-02 18:17:17 -08:00
proc.c
udp: Remove UDP-Lite SNMP stats.
2026-03-13 18:57:44 -07:00
protocol.c
…
raw.c
net: change sock_queue_rcv_skb_reason() to return a drop_reason
2026-04-12 14:30:25 -07:00
reassembly.c
ipv6: discard fragment queue earlier if there is malformed datagram
2026-02-27 19:08:54 -08:00
route.c
ipv6: prepare headers for ipv6_stub removal
2026-03-29 11:21:23 -07:00
rpl_iptunnel.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2025-07-17 11:00:33 -07:00
rpl.c
…
seg6_hmac.c
ipv6: add NULL checks for idev in SRv6 paths
2026-03-18 17:23:43 -07:00
seg6_iptunnel.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-04-09 13:20:59 -07:00
seg6_local.c
…
seg6.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
sit.c
ipv6: sit: remove redundant ret = 0 assignment
2026-04-09 20:37:40 -07:00
syncookies.c
tcp: secure_seq: add back ports to TS offset
2026-03-04 17:44:35 -08:00
sysctl_net_ipv6.c
…
tcp_ao.c
…
tcp_ipv6.c
Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2026-04-14 18:36:10 -07:00
tcpv6_offload.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-01-29 17:28:54 -08:00
tunnel6.c
…
udp_offload.c
udp: Don't pass udptable to IPv6 socket lookup functions.
2026-03-13 18:57:46 -07:00
udp.c
udp: Force compute_score to always inline
2026-04-13 15:44:42 -07:00
xfrm6_input.c
xfrm: hold dev ref until after transport_finish NF_HOOK
2026-04-07 10:12:40 +02:00
xfrm6_output.c
…
xfrm6_policy.c
xfrm6: fix uninitialized saddr in xfrm6_get_saddr()
2026-02-02 08:03:47 +01:00
xfrm6_protocol.c
…
xfrm6_state.c
…
xfrm6_tunnel.c
xfrm: flush all states in xfrm_state_fini
2025-08-06 09:23:38 +02:00