Eric Dumazet ac0841d7d2 net: prevent possible UAF in rtnl_prop_list_size() ...

I was mistaken by synchronize_rcu() [1] call in netdev_name_node_alt_destroy(),
giving a false sense of RCU safety at delete times.

We have to use list_del_rcu() to not confuse potential readers
in rtnl_prop_list_size().

[1] This synchronize_rcu() call was later removed in commit 723de3ebef
("net: free altname using an RCU callback").

Fixes: 9f30831390 ("net: add rcu safety to rtnl_prop_list_size()")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260502124102.499204-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-05-04 19:24:27 -07:00

..

bpf_sk_storage.c

bpf: Remove gfp_flags plumbing from bpf_local_storage_update()

2026-04-10 21:22:32 -07:00

datagram.c

…

dev_addr_lists_test.c

net: cache snapshot entries for ndo_set_rx_mode_async

2026-04-21 12:50:13 +02:00

dev_addr_lists.c

net: warn ops-locked drivers still using ndo_set_rx_mode

2026-04-21 12:50:25 +02:00

dev_api.c

net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work

2026-04-21 12:50:03 +02:00

dev_ioctl.c

net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work

2026-04-21 12:50:03 +02:00

dev.c

net: prevent possible UAF in rtnl_prop_list_size()

2026-05-04 19:24:27 -07:00

dev.h

net: introduce ndo_set_rx_mode_async and netdev_rx_mode_work

2026-04-21 12:50:03 +02:00

devmem.c

net: add net_iov_init() and use it to initialize ->page_type

2026-04-29 16:40:08 -07:00

devmem.h

…

drop_monitor.c

…

dst_cache.c

…

dst.c

…

failover.c

…

fib_notifier.c

…

fib_rules.c

…

filter.c

Merge tag 'net-7.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-04-23 16:50:42 -07:00

flow_dissector.c

flow_dissector: do not dissect PPPoE PFC frames

2026-04-20 11:35:16 -07:00

flow_offload.c

…

gen_estimator.c

…

gen_stats.c

…

gro_cells.c

…

gro.c

…

gso.c

…

hotdata.c

net: remove EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL() macros

2026-03-29 11:21:22 -07:00

hwbm.c

…

ieee8021q_helpers.c

…

link_watch.c

…

lock_debug.c

…

lwt_bpf.c

bpf: remove ipv6_bpf_stub completely and use direct function calls

2026-03-29 11:21:24 -07:00

lwtunnel.c

…

Makefile

…

mp_dmabuf_devmem.h

…

neighbour.c

neigh: let neigh_xmit take skb ownership

2026-04-27 19:02:11 -07:00

net_namespace.c

Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-04-14 18:36:10 -07:00

net_test.c

…

net-procfs.c

…

net-sysfs.c

Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2026-04-14 18:36:10 -07:00

net-sysfs.h

net: add skb_defer_disable_key static key

2026-03-12 19:25:33 -07:00

net-traces.c

…

netclassid_cgroup.c

…

netdev_config.c

…

netdev_queues.c

net: remove the netif_get_rx_queue_lease_locked() helpers

2026-04-09 18:26:28 -07:00

netdev_rx_queue.c

net: Rename ifq_idx to rxq_idx in netif_mp_* helpers

2026-04-12 09:12:07 -07:00

netdev-genl-gen.c

net: Add queue-create operation

2026-04-09 18:21:45 -07:00

netdev-genl-gen.h

net: Add queue-create operation

2026-04-09 18:21:45 -07:00

netdev-genl.c

net: remove the netif_get_rx_queue_lease_locked() helpers

2026-04-09 18:26:28 -07:00

netevent.c

…

netmem_priv.h

mm: introduce a new page type for page pool in page type

2026-04-05 13:53:19 -07:00

netpoll.c

netpoll: pass buffer size to egress_dev() to avoid MAC truncation

2026-05-04 18:37:25 -07:00

netprio_cgroup.c

…

of_net.c

…

page_pool_priv.h

…

page_pool_user.c

…

page_pool.c

page_pool: fix memory-provider leak in page_pool_create_percpu() error path

2026-04-29 19:11:49 -07:00

pktgen.c

…

ptp_classifier.c

…

rtnetlink.c

net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo

2026-05-01 17:04:28 -07:00

scm.c

…

secure_seq.c

…

selftests.c

…

skb_fault_injection.c

…

skbuff.c

net: add noinline __init __no_profile to skb_extensions_init() for GCOV compatibility

2026-04-12 15:29:02 -07:00

skmsg.c

bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

2026-04-01 18:54:04 -07:00

sock_destructor.h

…

sock_diag.c

…

sock_map.c

bpf, sockmap: Annotate af_unix sock:: Sk_state data-races

2026-04-15 17:22:42 -07:00

sock_reuseport.c

…

sock.c

tcp: update window_clamp when SO_RCVBUF is set

2026-04-13 15:32:35 +02:00

stream.c

…

sysctl_net_core.c

net: add skb_defer_disable_key static key

2026-03-12 19:25:33 -07:00

timestamping.c

…

tso.c

net: tso: Introduce tso_dma_map and helpers

2026-04-12 10:54:31 -07:00

utils.c

…

xdp.c

…