Eric DumazetandPaolo Abeni 2c1931a811 tcp: fix TIME_WAIT socket reference leak on PSP policy failure ...

Release the TIME_WAIT socket reference and jump to discard_it
upon PSP policy failure in both IPv4 and IPv6 receive paths.
This prevents a memory leak of tcp_tw_bucket structures.

Fixes: 659a2899a5 ("tcp: add datapath logic for PSP with inline key exchange")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Reviewed-by: Daniel Zahka <daniel.zahka@gmail.com>
Link: https://patch.msgid.link/20260710181317.4060230-1-edumazet@google.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>

2026-07-17 11:53:55 +02:00

..

ila

…

netfilter

netfilter: handle unreadable frags

2026-07-08 15:33:44 +02:00

addrconf_core.c

ipv6: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()

2026-06-05 17:47:42 -07:00

addrconf.c

ipv6: fix missing notification for ignore_routes_with_linkdown

2026-06-23 19:12:48 -07:00

addrlabel.c

…

af_inet6.c

tcp: rehash onto different local ECMP path on retransmit timeout

2026-06-15 15:57:31 -07:00

ah6.c

xfrm: ah: use skb_to_full_sk in async output callbacks

2026-05-16 10:56:14 +02:00

anycast.c

ipv6: anycast: insert aca into global hash under idev->lock

2026-06-02 19:30:39 -07:00

calipso.c

…

datagram.c

ipv6: validate extension header length before copying to cmsg

2026-05-26 18:53:10 -07:00

esp6_offload.c

…

esp6.c

esp: fix page frag reference leak on skb_to_sgvec failure

2026-06-09 15:58:17 +02:00

exthdrs_core.c

ipv6: Implement limits on extension header parsing

2026-04-30 17:21:45 -07:00

exthdrs_offload.c

…

exthdrs.c

ipv6: exthdrs: recompute network header pointer once

2026-06-03 19:14:56 -07:00

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

fou: Remove IPPROTO_UDPLITE check in gue_err() and gue6_err().

2026-03-17 16:10:59 -07:00

icmp.c

ipv6: fix possible UAF in icmpv6_rcv()

2026-04-18 12:09:52 -07:00

inet6_connection_sock.c

tcp: rehash onto different local ECMP path on retransmit timeout

2026-06-15 15:57:31 -07:00

inet6_hashtables.c

tcp: use __jhash_final() in inet6_ehashfn()

2026-03-29 11:45:48 -07:00

ioam6_iptunnel.c

ipv6: ioam: fix type confusion of dst_entry

2026-06-21 15:26:40 -07:00

ioam6.c

net: ioam6: no longer acquire qdisc spinlock while calling qdisc_qstats_qlen_backlog()

2026-05-14 17:05:20 -07:00

ip6_checksum.c

…

ip6_fib.c

ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump

2026-06-29 18:28:41 -07:00

ip6_flowlabel.c

ipv6: use READ_ONCE() in ipv6_flowlabel_get()

2026-06-04 18:31:18 -07:00

ip6_gre.c

net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

2026-06-17 16:01:52 -07:00

ip6_icmp.c

ipv6: remove dynamic ICMPv6 sender registration infrastructure

2026-03-29 11:21:23 -07:00

ip6_input.c

ipv6: Implement limits on extension header parsing

2026-04-30 17:21:45 -07:00

ip6_offload.c

net: pppoe: implement GRO/GSO support

2026-05-19 09:47:53 +02:00

ip6_offload.h

…

ip6_output.c

ipv6: account for fraggap on the paged allocation path

2026-06-21 15:24:49 -07:00

ip6_tunnel.c

netfilter: flowtable: fix and simplify IP6IP6 tunnel handling

2026-06-19 12:22:29 +02:00

ip6_udp_tunnel.c

udp_tunnel: Pass struct sock to udp_tunnel6_dst_lookup().

2026-05-05 17:47:04 -07:00

ip6_vti.c

net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

2026-06-17 16:01:52 -07:00

ip6mr.c

ipmr: Convert mr_table.cache_resolve_queue_len to u32.

2026-06-11 15:17:30 -07:00

ipcomp6.c

xfrm: add extack to xfrm_init_state

2026-06-04 12:22:35 +02:00

ipv6_sockglue.c

…

Kconfig

ipv6: default IPV6_SIT to m

2026-05-05 17:31:51 -07:00

Makefile

netfilter: add option for GCOV profiling

2026-05-24 22:55:47 +02:00

mcast_snoop.c

…

mcast.c

ipv6: mcast: Fix potential UAF in MLD delayed work

2026-07-08 14:41:01 +02:00

mip6.c

…

ndisc.c

ipv6: ndisc: fix NULL deref in accept_untracked_na()

2026-06-21 15:13:24 -07:00

netfilter.c

netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()

2026-07-10 16:28:47 +02:00

output_core.c

ipv6: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()

2026-06-05 17:47:42 -07:00

ping.c

…

proc.c

…

protocol.c

…

raw.c

net: change sock_queue_rcv_skb_reason() to return a drop_reason

2026-04-12 14:30:25 -07:00

reassembly.c

ipv6: frags: cleanup __IP6_INC_STATS() confusion

2026-05-27 17:27:26 -07:00

route.c

ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().

2026-06-22 18:20:09 -07:00

rpl_iptunnel.c

net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

2026-04-28 11:16:14 +02:00

rpl.c

…

seg6_hmac.c

ipv6: add NULL checks for idev in SRv6 paths

2026-03-18 17:23:43 -07:00

seg6_iptunnel.c

net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels

2026-04-28 11:16:14 +02:00

seg6_local.c

…

seg6.c

seg6: validate SRH length before reading fixed fields

2026-06-26 18:49:37 -07:00

sit.c

net: sit: require CAP_NET_ADMIN in the device netns for changelink

2026-06-21 15:10:06 -07:00

syncookies.c

tcp: rehash onto different local ECMP path on retransmit timeout

2026-06-15 15:57:31 -07:00

sysctl_net_ipv6.c

…

tcp_ao.c

net/tcp-ao: Return void from functions that can no longer fail

2026-04-30 09:38:56 +02:00

tcp_ipv6.c

tcp: fix TIME_WAIT socket reference leak on PSP policy failure

2026-07-17 11:53:55 +02:00

tcpv6_offload.c

…

tunnel6.c

…

udp_offload.c

udp: Don't pass udptable to IPv6 socket lookup functions.

2026-03-13 18:57:46 -07:00

udp.c

udp: Force compute_score to always inline

2026-04-13 15:44:42 -07:00

xfrm6_input.c

xfrm: Fix dev use-after-free in xfrm async resumption

2026-06-12 08:39:59 +02:00

xfrm6_output.c

…

xfrm6_policy.c

xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()

2026-07-06 08:29:08 +02:00

xfrm6_protocol.c

ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()

2026-04-17 10:40:29 +02:00

xfrm6_state.c

…

xfrm6_tunnel.c

…