averello/linux-stable-mirror
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-03 12:05:13 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
704cd2f2074203306e75a2a086e514b1615fa2a1
linux-stable-mirror/net
History
Hyunwoo Kim 8a008c89e5 net/sched: fix use-after-free in taprio_dev_notifier 
commit b160766e26 upstream.

Since taprio’s taprio_dev_notifier() isn’t protected by an
RCU read-side critical section, a race with advance_sched()
can lead to a use-after-free.

Adding rcu_read_lock() inside taprio_dev_notifier() prevents this.

Fixes: fed87cc671 ("net/sched: taprio: automatically calculate queueMaxSDU based on TC gate durations")
Cc: stable@vger.kernel.org
Signed-off-by: Hyunwoo Kim <imv4bel@gmail.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/aEzIYYxt0is9upYG@v4bel-B760M-AORUS-ELITE-AX
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2025-06-27 11:11:21 +01:00
..
6lowpan
…
9p
9p/trans_fd: mark concurrent read and writes to p9_conn->err
2025-05-02 07:59:20 +02:00
802
…
8021q
net: vlan: don't propagate flags on open
2025-04-20 10:15:21 +02:00
appletalk
…
atm
atm: Fix NULL pointer dereference
2025-04-07 10:08:35 +02:00
ax25
…
batman-adv
batman-adv: Ignore own maximum aggregation size during RX
2025-03-28 22:03:31 +01:00
bluetooth
Bluetooth: MGMT: Fix sparse errors
2025-06-19 15:32:30 +02:00
bpf
…
bridge
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
2025-06-19 15:31:46 +02:00
caif
…
can
can: bcm: add missing rcu read protection for procfs content
2025-05-29 11:03:19 +02:00
ceph
…
core
page_pool: Fix use-after-free in page_pool_recycle_in_ring
2025-06-19 15:32:14 +02:00
dcb
…
dccp
…
devlink
devlink: fix xa_alloc_cyclic() error handling
2025-03-28 22:03:27 +01:00
dns_resolver
…
dsa
net: dsa: tag_brcm: legacy: fix pskb_may_pull length
2025-06-19 15:32:16 +02:00
ethernet
…
ethtool
ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll()
2025-04-25 10:47:43 +02:00
handshake
…
hsr
net: hsr: Fix PRP duplicate detection
2025-05-29 11:02:20 +02:00
ieee802154
…
ife
…
ipv4
net: fix udp gso skb_segment after pull from frag_list
2025-06-19 15:32:17 +02:00
ipv6
seg6: Fix validation of nexthop addresses
2025-06-19 15:32:20 +02:00
iucv
…
kcm
…
key
…
l2tp
…
l3mdev
…
lapb
…
llc
llc: fix data loss when reading from a socket in llc_ui_recvmsg()
2025-05-29 11:03:20 +02:00
mac80211
wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
2025-06-19 15:32:19 +02:00
mac802154
…
mctp
net: mctp: Ensure keys maintain only one ref to corresponding dev
2025-05-22 14:29:40 +02:00
mpls
…
mptcp
mptcp: pm: userspace: flags: clearer msg if no remote addr
2025-05-29 11:02:56 +02:00
ncsi
net: ncsi: Fix GCPS 64-bit member variables
2025-06-19 15:31:42 +02:00
netfilter
netfilter: nf_nat: also check reverse tuple to obtain clashing entry
2025-06-19 15:32:19 +02:00
netlabel
calipso: unlock rcu before returning -EAFNOSUPPORT
2025-06-19 15:32:37 +02:00
netlink
…
netrom
…
nfc
NFC: nci: uart: Set tty->disc_data only in success path
2025-06-27 11:11:21 +01:00
nsh
…
openvswitch
net: openvswitch: Fix the dead loop of MPLS parse
2025-06-19 15:31:55 +02:00
packet
…
phonet
…
psample
…
qrtr
…
rds
…
rfkill
…
rose
…
rxrpc
…
sched
net/sched: fix use-after-free in taprio_dev_notifier
2025-06-27 11:11:21 +01:00
sctp
sctp: detect and prevent references to a freed transport in sendmsg
2025-04-20 10:15:50 +02:00
smc
net/smc: use the correct ndev to find pnetid by pnetid table
2025-05-29 11:02:18 +02:00
strparser
…
sunrpc
svcrdma: Unregister the device if svc_rdma_accept() fails
2025-06-27 11:11:16 +01:00
switchdev
net: switchdev: Convert blocking notification chain to a raw one
2025-03-22 12:54:12 -07:00
tipc
net: tipc: fix refcount warning in tipc_aead_encrypt
2025-06-19 15:32:15 +02:00
tls
ktls, sockmap: Fix missing uncharge operation
2025-06-19 15:31:48 +02:00
unix
…
vmw_vsock
vsock/virtio: fix rx_bytes accounting for stream sockets
2025-06-19 15:31:54 +02:00
wireless
wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
2025-06-19 15:32:19 +02:00
x25
…
xdp
xsk: Fix race condition in AF_XDP generic RX path
2025-05-09 09:50:38 +02:00
xfrm
xfrm: Use xdo.dev instead of xdo.real_dev
2025-06-19 15:31:43 +02:00
compat.c
…
devres.c
…
Kconfig
…
Kconfig.debug
…
Makefile
…
socket.c
…
sysctl_net.c
…