Eric DumazetandGreg Kroah-Hartman 784eb23762 neighbour: use RCU protection in __neigh_notify() ...

[ Upstream commit becbd5850c ]

__neigh_notify() can be called without RTNL or RCU protection.

Use RCU protection to avoid potential UAF.

Fixes: 426b5303eb ("[NETNS]: Modify the neighbour table code so it handles multiple network namespaces")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250207135841.1948589-4-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-21 13:50:08 +01:00

..

bpf_sk_storage.c

bpf: Refactor some inode/task/sk storage functions for reuse

2024-07-18 13:18:34 +02:00

datagram.c

net: fix rc7's __skb_datagram_iter()

2024-07-18 13:18:33 +02:00

dev_addr_lists_test.c

…

dev_addr_lists.c

…

dev_ioctl.c

…

dev.c

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

2025-01-09 13:30:02 +01:00

dev.h

…

drop_monitor.c

drop_monitor: replace spin_lock by raw_spin_lock

2024-06-27 13:46:15 +02:00

dst_cache.c

…

dst.c

net: do not delay dst_entries_add() in dst_release()

2024-11-14 13:15:17 +01:00

failover.c

…

fib_notifier.c

…

fib_rules.c

…

filter.c

bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write

2025-02-21 13:49:09 +01:00

flow_dissector.c

flow_dissector: use RCU protection to fetch dev_net()

2025-02-21 13:50:07 +01:00

flow_offload.c

…

gen_estimator.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

gen_stats.c

…

gro_cells.c

…

gro.c

gro: fix ownership transfer

2024-04-10 16:28:26 +02:00

hwbm.c

…

link_watch.c

net: linkwatch: use system_unbound_wq

2024-08-14 13:52:44 +02:00

lwt_bpf.c

…

lwtunnel.c

…

Makefile

…

neighbour.c

neighbour: use RCU protection in __neigh_notify()

2025-02-21 13:50:08 +01:00

net_namespace.c

net: add exit_batch_rtnl() method

2025-01-23 17:17:09 +01:00

net-procfs.c

…

net-sysfs.c

ethtool: check device is present when getting link settings

2024-09-04 13:25:01 +02:00

net-sysfs.h

…

net-traces.c

…

netclassid_cgroup.c

…

netevent.c

…

netpoll.c

netpoll: Use rcu_access_pointer() in __netpoll_setup

2024-12-14 19:54:45 +01:00

netprio_cgroup.c

…

of_net.c

…

page_pool.c

…

pktgen.c

pktgen: Avoid out-of-bounds access in get_imix_entries

2025-01-23 17:17:09 +01:00

ptp_classifier.c

…

request_sock.c

…

rtnetlink.c

net: fix crash when config small gso_max_size/gso_ipv4_max_size

2024-12-14 19:53:11 +01:00

scm.c

io_uring/unix: drop usage of io_uring socket

2024-03-26 18:20:22 -04:00

secure_seq.c

…

selftests.c

…

skbuff.c

net: dsa: tag_ocelot: call only the relevant portion of __skb_vlan_pop() on TX

2024-08-29 17:30:43 +02:00

skmsg.c

tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection

2025-01-02 10:30:48 +01:00

sock_destructor.h

…

sock_diag.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

sock_map.c

bpf, sockmap: Fix race between element replace and close()

2025-01-17 13:34:36 +01:00

sock_reuseport.c

…

sock.c

net: restrict SO_REUSEPORT to inet sockets

2025-01-09 13:30:02 +01:00

stream.c

…

sysctl_net_core.c

net: let net.core.dev_weight always be non-zero

2025-02-21 13:49:05 +01:00

timestamping.c

…

tso.c

…

utils.c

…

xdp.c

xdp: fix invalid wait context of page_pool_destroy()

2024-08-03 08:49:09 +02:00