Pablo Neira AyusoandGreg Kroah-Hartman a2471d2710 netfilter: flowtable: validate pppoe header ...

[ Upstream commit 87b3593bed ]

Ensure there is sufficient room to access the protocol field of the
PPPoe header. Validate it once before the flowtable lookup, then use a
helper function to access protocol field.

Reported-by: syzbot+b6f07e1c07ef40199081@syzkaller.appspotmail.com
Fixes: 72efd585f7 ("netfilter: flowtable: add pppoe support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-04-27 17:11:31 +02:00

..

9p

…

bluetooth

Bluetooth: SCO: Fix not validating setsockopt user input

2024-04-17 11:19:30 +02:00

caif

net: caif: Remove unused declaration cfsrvl_ctrlcmd()

2023-08-10 18:24:48 -07:00

iucv

…

mana

net: mana: Fix Rx DMA datasize and skb_over_panic

2024-04-10 16:35:49 +02:00

netfilter

netfilter: flowtable: validate pppoe header

2024-04-27 17:11:31 +02:00

netns

xfrm: fix a data-race in xfrm_gen_index()

2023-09-13 09:20:28 +02:00

nfc

…

page_pool

page_pool: fix documentation typos

2023-10-04 14:22:27 -07:00

phonet

…

sctp

sctp: Remove unused declaration sctp_backlog_migrate()

2023-08-10 19:31:52 -07:00

tc_act

net: sched: do not offload flows with a helper in act_ct

2023-11-28 17:19:54 +00:00

6lowpan.h

…

act_api.h

…

addrconf.h

ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

2024-04-17 11:19:29 +02:00

af_ieee802154.h

…

af_rxrpc.h

…

af_unix.h

af_unix: Do not use atomic ops for unix_sk(sk)->inflight.

2024-04-17 11:19:32 +02:00

af_vsock.h

virtio/vsock: send credit update during setting SO_RCVLOWAT

2024-01-25 15:35:26 -08:00

ah.h

…

amt.h

…

arp.h

…

atmclip.h

…

ax25.h

…

ax88796.h

…

bareudp.h

…

bond_3ad.h

bonding: 3ad: Remove unused declaration bond_3ad_update_lacp_active()

2023-07-28 18:06:30 -07:00

bond_alb.h

…

bond_options.h

…

bonding.h

bonding: fix macvlan over alb bond support

2023-08-24 10:07:13 +02:00

bpf_sk_storage.h

…

busy_poll.h

net: invert the netdevice.h vs xdp.h dependency

2023-08-03 08:38:07 -07:00

calipso.h

…

cfg80211-wext.h

…

cfg80211.h

wifi: cfg80211: add a flag to disable wireless extensions

2024-04-03 15:28:54 +02:00

cfg802154.h

mac802154: fix llsec key resources release in mac802154_llsec_key_del

2024-04-03 15:28:27 +02:00

checksum.h

…

cipso_ipv4.h

…

cls_cgroup.h

…

codel_impl.h

…

codel_qdisc.h

…

codel.h

codel: fix kernel-doc notation warnings

2023-07-14 20:39:29 -07:00

compat.h

…

datalink.h

net: datalink: Remove unused declarations

2023-07-27 17:17:32 -07:00

dcbevent.h

…

dcbnl.h

…

devlink.h

devlink: Expose port function commands to control IPsec packet offloads

2023-08-27 17:08:45 -07:00

dropreason-core.h

net: add skb_queue_purge_reason and __skb_queue_purge_reason

2023-08-19 15:30:15 +01:00

dropreason.h

net: openvswitch: add last-action drop reason

2023-08-14 08:01:06 +01:00

dsa_stubs.h

…

dsa.h

net: dsa: remove legacy_pre_march2020 detection

2023-07-18 09:47:08 +02:00

dsfield.h

…

dst_cache.h

…

dst_metadata.h

…

dst_ops.h

net: remove unnecessary input parameter 'how' in ifdown function

2023-08-22 13:19:02 +02:00

dst.h

…

erspan.h

…

esp.h

…

espintcp.h

…

ethoc.h

…

failover.h

…

fib_notifier.h

…

fib_rules.h

…

firewire.h

…

flow_dissector.h

net: flow_dissector: Add IPSEC dissector

2023-08-02 10:09:31 +01:00

flow_offload.h

tc: flower: Enable offload support IPSEC SPI field.

2023-08-02 10:09:32 +01:00

flow.h

inet: shrink struct flowi_common

2023-11-20 11:59:34 +01:00

fou.h

…

fq_impl.h

…

fq.h

net: fq: Remove unused typedef fq_flow_get_default_t

2023-08-08 15:58:23 -07:00

garp.h

…

gen_stats.h

…

genetlink.h

drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group

2023-12-13 18:45:10 +01:00

geneve.h

…

gre.h

…

gro_cells.h

…

gro.h

net: gro: fix misuse of CB in udp socket lookup

2023-07-29 17:10:27 +01:00

gso.h

…

gtp.h

…

gue.h

…

handshake.h

net/handshake: Add helpers for parsing incoming TLS Alerts

2023-07-28 14:07:59 -07:00

hwbm.h

…

icmp.h

…

ieee80211_radiotap.h

wifi: radiotap: fix kernel-doc notation warnings

2023-08-22 21:40:40 +02:00

ieee802154_netdev.h

…

if_inet6.h

net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX

2023-12-20 17:01:45 +01:00

ife.h

…

inet6_connection_sock.h

…

inet6_hashtables.h

net: Fix slab-out-of-bounds in inet[6]_steal_sock

2023-08-15 13:57:51 -07:00

inet_common.h

net: factor out __inet_listen_sk() helper

2023-08-14 07:06:13 +01:00

inet_connection_sock.h

tcp: properly terminate timers for kernel sockets

2024-04-10 16:35:42 +02:00

inet_dscp.h

…

inet_ecn.h

…

inet_frag.h

inet: frags: eliminate kernel-doc warning

2023-07-14 20:39:29 -07:00

inet_hashtables.h

net: Fix slab-out-of-bounds in inet[6]_steal_sock

2023-08-15 13:57:51 -07:00

inet_sock.h

udp: fix busy polling

2024-01-31 16:19:01 -08:00

inet_timewait_sock.h

…

inetpeer.h

…

ioam6.h

…

ip6_checksum.h

…

ip6_fib.h

net/ipv6: Revert remove expired routes with a separated list of routes

2024-01-01 12:42:33 +00:00

ip6_route.h

IPv6: add extack info for IPv6 address add/delete

2023-07-28 11:01:56 +01:00

ip6_tunnel.h

…

ip_fib.h

ipv4/fib: send notify when delete source address routes

2023-10-03 09:00:40 +02:00

ip_tunnels.h

geneve: fix header validation in geneve[6]_xmit_skb

2024-04-17 11:19:28 +02:00

ip_vs.h

…

ip.h

ipmr: fix kernel panic when forwarding mcast packets

2024-02-05 20:14:35 +00:00

ipcomp.h

…

ipconfig.h

…

ipv6_frag.h

…

ipv6_stubs.h

bpf: Derive source IP addr via bpf_*_fib_lookup()

2024-03-01 13:35:04 +01:00

ipv6.h

tcp: Fix bind() regression for v4-mapped-v6 wildcard address.

2023-09-13 07:18:04 +01:00

iw_handler.h

wifi: wext: Remove unused declaration dev_get_wireless_info()

2023-08-22 21:40:40 +02:00

kcm.h

…

l3mdev.h

…

lag.h

…

lapb.h

…

lib80211.h

…

llc_c_ac.h

net: llc: Remove unused function declarations

2023-08-04 15:33:17 -07:00

llc_c_ev.h

net: llc: Remove unused function declarations

2023-08-04 15:33:17 -07:00

llc_c_st.h

…

llc_conn.h

llc: Check netns in llc_estab_match() and llc_listener_match().

2023-07-20 10:46:28 +02:00

llc_if.h

…

llc_pdu.h

llc: Drop support for ETH_P_TR_802_2.

2024-01-31 16:19:01 -08:00

llc_s_ac.h

…

llc_s_ev.h

…

llc_s_st.h

…

llc_sap.h

…

llc.h

…

lwtunnel.h

lwt: Check LWTUNNEL_XMIT_CONTINUE strictly

2023-08-18 16:05:26 +02:00

mac80211.h

Merge tag 'wireless-next-2023-08-25' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless-next

2023-08-25 18:35:09 -07:00

mac802154.h

…

macsec.h

net: macsec: indicate next pn update when offloading

2023-10-10 10:30:30 +02:00

mctp.h

net: mctp: take ownership of skb in mctp_local_output

2024-03-06 14:48:34 +00:00

mctpdevice.h

…

mip6.h

…

mld.h

…

mpls_iptunnel.h

…

mpls.h

…

mptcp.h

mptcp: add struct mptcp_sched_ops

2023-08-22 17:31:18 -07:00

mrp.h

…

ncsi.h

…

ndisc.h

ndisc: Remove unused ndisc_ifinfo_sysctl_strategy() declaration

2023-08-07 08:53:55 +01:00

neighbour.h

neighbour: Fix __randomize_layout crash in struct neighbour

2023-12-08 08:52:23 +01:00

net_debug.h

…

net_failover.h

…

net_namespace.h

Merge tag 'sysctl-6.6-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/mcgrof/linux

2023-08-29 17:39:15 -07:00

net_ratelimit.h

…

net_trackers.h

…

netdev_queues.h

net: netdev_queue: netdev_txq_completed_mb(): fix wake condition

2024-01-25 15:35:57 -08:00

netdev_rx_queue.h

net: move struct netdev_rx_queue out of netdevice.h

2023-08-03 08:38:07 -07:00

netevent.h

…

netlabel.h

…

netlink.h

netlink: allow be16 and be32 types in all uint policy checks

2023-07-27 13:45:51 +02:00

netprio_cgroup.h

…

netrom.h

…

nexthop.h

…

nl802154.h

…

nsh.h

net: NSH: fix kernel-doc notation warning

2023-07-14 20:39:29 -07:00

p8022.h

net: 802: Remove unused function declarations

2023-08-04 15:33:50 -07:00

pie.h

pie: fix kernel-doc notation warning

2023-07-14 20:39:30 -07:00

ping.h

…

pkt_cls.h

net: pkt_cls: Remove unused inline helpers

2023-08-07 08:53:54 +01:00

pkt_sched.h

net/sched: make psched_mtu() RTNL-less safe

2023-07-12 15:59:33 -07:00

pptp.h

…

protocol.h

…

psample.h

…

psnap.h

…

raw.h

…

rawv6.h

…

red.h

…

regulatory.h

…

request_sock.h

…

rose.h

…

route.h

inet: move inet->transparent to inet->inet_flags

2023-08-16 11:09:17 +01:00

rpl.h

…

rsi_91x.h

rsi: remove kernel-doc comment marker

2023-07-14 20:39:30 -07:00

rtnetlink.h

net: validate veth and vxcan peer ifindexes

2023-08-20 11:40:03 +01:00

rtnh.h

…

sch_generic.h

net/sched: flower: Fix chain template offload

2024-01-31 16:19:02 -08:00

scm.h

af_unix: Fix msg_controllen test in scm_pidfd_recv() for MSG_CMSG_COMPAT.

2023-09-04 11:00:17 +01:00

secure_seq.h

…

seg6_hmac.h

…

seg6_local.h

…

seg6.h

…

selftests.h

…

slhc_vj.h

…

smc.h

…

snmp.h

…

sock_reuseport.h

…

sock.h

tcp: properly terminate timers for kernel sockets

2024-04-10 16:35:42 +02:00

Space.h

net: Space.h: Remove unused function declarations

2023-08-03 18:10:10 -07:00

stp.h

…

strparser.h

…

switchdev.h

net: bridge: switchdev: Skip MDB replays of deferred events on offload

2024-03-01 13:35:06 +01:00

tc_wrapper.h

…

tcp_states.h

…

tcp.h

mptcp: fix lockless access in subflow ULP diag

2024-03-01 13:35:02 +01:00

tcx.h

bpf: Add fd-based tcx multi-prog infra with link support

2023-07-19 10:07:27 -07:00

timewait_sock.h

…

tipc.h

…

tls_prot.h

net/tls: Add TLS Alert definitions

2023-07-28 14:07:59 -07:00

tls_toe.h

…

tls.h

tls: fix race between async notify and socket close

2024-02-23 09:24:52 +01:00

transp_v6.h

inet6: Remove unused function declaration udpv6_connect()

2023-08-01 15:06:27 -07:00

tso.h

…

tun_proto.h

…

udp_tunnel.h

udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO

2023-11-20 11:58:56 +01:00

udp.h

udp/udplite: Remove unused function declarations udp{,lite}_get_port()

2023-08-07 08:53:55 +01:00

udplite.h

udplite: fix various data-races

2023-11-20 11:58:56 +01:00

vsock_addr.h

…

vxlan.h

vxlan: Fix nexthop hash size

2023-08-02 10:58:26 +01:00

wext.h

…

x25.h

…

x25device.h

…

xdp_priv.h

…

xdp_sock_drv.h

xsk: fix usage of multi-buffer BPF helpers for ZC XDP

2024-01-31 16:19:04 -08:00

xdp_sock.h

xsk: add multi-buffer support for sockets sharing umem

2024-01-10 17:16:54 +01:00

xdp.h

net: invert the netdevice.h vs xdp.h dependency

2023-08-03 08:38:07 -07:00

xfrm.h

xfrm: don't skip free of empty state in acquire policy

2023-08-01 12:04:43 +02:00

xsk_buff_pool.h

xsk: support mbuf on ZC RX

2023-07-19 09:56:49 -07:00