Yue Haibing 483303d94c ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled ...

[ Upstream commit 3d95261eeb ]

In ipv6_rpl_srh_rcv() we use min(net->ipv6.devconf_all->rpl_seg_enabled,
idev->cnf.rpl_seg_enabled) is intended to return 0 when either value is
zero, but if one of the values is negative it will in fact return non-zero.

Signed-off-by: Yue Haibing <yuehaibing@huawei.com>
Link: https://patch.msgid.link/20250901123726.1972881-3-yuehaibing@huawei.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-11-13 15:34:18 -05:00

..

6lowpan

…

9p

net/9p: Fix buffer overflow in USB transport layer

2025-10-15 12:00:24 +02:00

802

…

8021q

net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime

2025-07-24 08:56:34 +02:00

appletalk

net: appletalk: Fix use-after-free in AARP proxy probe

2025-08-01 09:48:41 +01:00

atm

net: atm: fix memory leak in atm_register_sysfs when device_register fail

2025-09-09 18:58:13 +02:00

ax25

ax25: properly unshare skbs in ax25_kiss_rcv()

2025-09-09 18:58:13 +02:00

batman-adv

batman-adv: fix OOB read/write in network-coding decode

2025-09-09 18:58:18 +02:00

bluetooth

Bluetooth: hci_core: Fix tracking of periodic advertisement

2025-11-13 15:33:58 -05:00

bpf

…

bridge

bridge: Redirect to backup port when port is administratively down

2025-11-13 15:34:12 -05:00

caif

caif: reduce stack size, again

2025-08-15 12:13:40 +02:00

can

can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails

2025-09-19 16:35:49 +02:00

ceph

libceph: fix invalid accesses to ceph_connection_v1_info

2025-09-19 16:35:47 +02:00

core

net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.

2025-11-13 15:34:14 -05:00

dcb

…

dccp

…

devlink

…

dns_resolver

…

dsa

net: dsa: provide implementation of .support_eee()

2025-09-09 18:58:19 +02:00

ethernet

…

ethtool

…

handshake

…

hsr

hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr

2025-09-19 16:35:50 +02:00

ieee802154

…

ife

…

ipv4

tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

2025-11-13 15:34:17 -05:00

ipv6

ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled

2025-11-13 15:34:18 -05:00

iucv

…

kcm

net: kcm: Fix race condition in kcm_unattach()

2025-08-20 18:30:18 +02:00

key

…

l2tp

l2tp: do not use sock_hold() in pppol2tp_session_get_sock()

2025-09-04 15:31:51 +02:00

l3mdev

…

lapb

…

llc

…

mac80211

wifi: mac80211: fix key tailroom accounting leak

2025-11-13 15:33:57 -05:00

mac802154

…

mctp

mctp: return -ENOPROTOOPT for unknown getsockopt options

2025-09-09 18:58:13 +02:00

mpls

mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().

2025-06-27 11:11:43 +01:00

mptcp

mptcp: restore window probe

2025-11-13 15:33:55 -05:00

ncsi

net: ncsi: Fix buffer overflow in fetching version id

2025-08-20 18:30:38 +02:00

netfilter

netfilter: nft_objref: validate objref and objrefmap expressions

2025-10-19 16:33:42 +02:00

netlabel

…

netlink

genetlink: fix genl_bind() invoking bind() after -EPERM

2025-09-19 16:35:48 +02:00

netrom

…

nfc

net: nfc: nci: Add parameter validation for packet data

2025-10-15 12:00:21 +02:00

nsh

…

openvswitch

…

packet

net/packet: fix a race in packet_set_ring() and packet_notifier()

2025-08-15 12:14:09 +02:00

phonet

phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()

2025-07-24 08:56:24 +02:00

psample

…

qrtr

…

rds

rds: Fix endianness annotation for RDS_MPATH_HASH

2025-11-13 15:34:15 -05:00

rfkill

net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

2025-09-25 11:13:47 +02:00

rose

net: rose: fix a typo in rose_clear_routes()

2025-09-04 15:31:55 +02:00

rxrpc

rxrpc: Fix transmission of an abort in response to an abort

2025-07-24 08:56:35 +02:00

sched

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2025-11-02 22:15:20 +09:00

sctp

sctp: avoid NULL dereference when chunk data buffer is missing

2025-10-29 14:08:55 +01:00

smc

net/smc: fix general protection fault in __smc_diag_dump

2025-10-29 14:08:54 +01:00

strparser

…

sunrpc

nfsd: unregister with rpcbind when deleting a transport

2025-10-19 16:34:03 +02:00

switchdev

…

tipc

tipc: Fix use-after-free in tipc_conn_close().

2025-07-17 18:37:05 +02:00

tls

tls: don't rely on tx_work during send()

2025-10-23 16:20:31 +02:00

unix

af_unix: Don't set -ECONNRESET for consumed OOB skb.

2025-07-06 11:01:40 +02:00

vmw_vsock

vsock: fix lock inversion in vsock_assign_transport()

2025-10-29 14:08:57 +01:00

wireless

wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

2025-11-02 22:15:22 +09:00

x25

…

xdp

xsk: Harden userspace-supplied xdp_desc validation

2025-10-19 16:33:53 +02:00

xfrm

xfrm: xfrm_alloc_spi shouldn't use 0 as SPI

2025-10-02 13:44:09 +02:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

…

sysctl_net.c

…