Eric Dumazet 1b0998fdd8 ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() ...

[ Upstream commit 10bfd453da ]

It seems that if userspace provides a correct IFA_TARGET_NETNSID value
but no IFA_ADDRESS and IFA_LOCAL attributes, inet6_rtm_getaddr()
returns -EINVAL with an elevated "struct net" refcount.

Fixes: 6ecf4c37eb ("ipv6: enable IFA_TARGET_NETNSID for RTM_GETADDR")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Christian Brauner <brauner@kernel.org>
Cc: David Ahern <dsahern@kernel.org>
Reviewed-by: David Ahern <dsahern@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-06 14:45:06 +00:00

..

6lowpan

…

9p

…

802

…

8021q

…

appletalk

…

atm

…

ax25

…

batman-adv

…

bluetooth

…

bpf

…

bpfilter

…

bridge

net: bridge: switchdev: Ensure deferred event delivery on unoffload

2024-03-01 13:26:36 +01:00

caif

…

can

…

ceph

…

core

bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()

2024-03-01 13:26:37 +01:00

dcb

…

dccp

…

devlink

…

dns_resolver

…

dsa

…

ethernet

…

ethtool

…

hsr

…

ieee802154

…

ife

…

ipv4

net: ip_tunnel: prevent perpetual headroom growth

2024-03-06 14:45:06 +00:00

ipv6

ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()

2024-03-06 14:45:06 +00:00

iucv

…

kcm

…

key

…

l2tp

l2tp: pass correct message length to ip6_append_data

2024-03-01 13:26:33 +01:00

l3mdev

…

lapb

…

llc

…

mac80211

wifi: mac80211: adding missing drv_mgd_complete_tx() call

2024-03-01 13:26:29 +01:00

mac802154

…

mctp

net: mctp: take ownership of skb in mctp_local_output

2024-03-06 14:45:06 +00:00

mpls

…

mptcp

mptcp: add needs_id for netlink appending addr

2024-03-01 13:26:39 +01:00

ncsi

…

netfilter

netfilter: nf_tables: disallow timeout for anonymous sets

2024-03-06 14:45:04 +00:00

netlabel

…

netlink

netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter

2024-03-06 14:45:06 +00:00

netrom

…

nfc

…

nsh

…

openvswitch

…

packet

net: dev: Convert sa_data to flexible array in struct sockaddr

2024-03-01 13:26:36 +01:00

phonet

phonet/pep: fix racy skb_queue_empty() use

2024-03-01 13:26:38 +01:00

psample

…

qrtr

…

rds

…

rfkill

…

rose

…

rxrpc

…

sched

net/sched: Retire dsmark qdisc

2024-03-01 13:26:24 +01:00

sctp

…

smc

…

strparser

…

sunrpc

…

switchdev

net: bridge: switchdev: Skip MDB replays of deferred events on offload

2024-03-01 13:26:35 +01:00

tipc

…

tls

tls: don't skip over different type records from the rx_list

2024-03-01 13:26:37 +01:00

unix

af_unix: Fix task hung while purging oob_skb in GC.

2024-03-06 14:45:04 +00:00

vmw_vsock

…

wireless

wifi: cfg80211: fix missing interfaces when dumping

2024-03-01 13:26:25 +01:00

x25

…

xdp

…

xfrm

…

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

…

sysctl_net.c

…