Eric Dumazet aca2d353a4 ipv6: fix a race in ip6_sock_set_v6only() ...

[ Upstream commit 452a3eee22 ]

It is unlikely that this function will be ever called
with isk->inet_num being not zero.

Perform the check on isk->inet_num inside the locked section
for complete safety.

Fixes: 9b115749ac ("ipv6: add ip6_sock_set_v6only")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Reviewed-by: Fernando Fernandez Mancera <fmancera@suse.de>
Link: https://patch.msgid.link/20260216102202.3343588-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-04 07:19:47 -05:00

..

9p

…

bluetooth

Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

2024-09-12 11:06:43 +02:00

caif

…

iucv

…

netfilter

netfilter: nf_conncount: increase the connection clean up limit to 64

2026-03-04 07:19:33 -05:00

netns

xfrm: fix a data-race in xfrm_gen_index()

2023-10-25 11:54:19 +02:00

nfc

nfc: nci: Fix race between rfkill and nci_unregister_device().

2026-02-06 16:40:11 +01:00

phonet

…

sctp

sctp: hold endpoint before calling cb in sctp_transport_lookup_process

2025-12-07 06:08:16 +09:00

tc_act

net_sched: act_ctinfo: use atomic64_t for three counters

2025-08-28 16:22:33 +02:00

6lowpan.h

…

act_api.h

…

addrconf.h

ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr

2024-05-02 16:23:34 +02:00

af_ieee802154.h

…

af_rxrpc.h

…

af_unix.h

af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().

2024-05-02 16:23:43 +02:00

af_vsock.h

vsock: each transport cycles only on its own sockets

2022-03-23 09:13:27 +01:00

ah.h

…

arp.h

ipv4: Invalidate neighbour for broadcast address upon address addition

2022-04-13 21:00:57 +02:00

atmclip.h

…

ax25.h

ax25: fix reference count leaks of ax25_dev

2022-04-20 09:23:31 +02:00

ax88796.h

…

bareudp.h

…

bond_3ad.h

net: bonding: Share lacpdu_mcast_addr definition

2022-09-28 11:10:31 +02:00

bond_alb.h

bonding (gcc13): synchronize bond_{a,t}lb_xmit() types

2023-06-14 11:09:31 +02:00

bond_options.h

…

bonding.h

bonding: fix macvlan over alb bond support

2023-08-30 16:23:14 +02:00

bpf_sk_storage.h

…

busy_poll.h

net: busy-poll: use ktime_get_ns() instead of local_clock()

2024-09-04 13:17:46 +02:00

calipso.h

…

cfg80211-wext.h

…

cfg80211.h

wifi: cfg80211: Fix interface type validation

2025-08-28 16:22:43 +02:00

cfg802154.h

mac802154: fix llsec key resources release in mac802154_llsec_key_del

2024-04-13 12:58:25 +02:00

checksum.h

net: Fix checksum update for ILA adj-transport

2025-06-27 11:04:24 +01:00

cipso_ipv4.h

…

cls_cgroup.h

net/cls_cgroup: Fix task_get_classid() during qdisc run

2025-12-07 06:08:13 +09:00

codel_impl.h

…

codel_qdisc.h

…

codel.h

…

compat.h

net/ipv4/ipv6: Replace one-element arraya with flexible-array members

2024-03-26 18:21:53 -04:00

datalink.h

…

dcbevent.h

…

dcbnl.h

…

devlink.h

…

dsa.h

…

dsfield.h

…

dst_cache.h

wireguard: device: reset peer src endpoint when netns exits

2021-12-08 09:03:22 +01:00

dst_metadata.h

net: fix a memleak when uncloning an skb dst and its metadata

2022-02-16 12:54:26 +01:00

dst_ops.h

net: fix __dst_negative_advice() race

2024-06-16 13:32:36 +02:00

dst.h

include: net: add static inline dst_dev_overhead() to dst.h

2025-03-13 12:47:32 +01:00

erspan.h

…

esp.h

esp: limit skb_page_frag_refill use to a single page

2022-04-27 13:53:48 +02:00

espintcp.h

…

ethoc.h

…

failover.h

…

fib_notifier.h

…

fib_rules.h

ipv6: fix memory leak in fib6_rule_suppress

2021-12-08 09:03:21 +01:00

firewire.h

…

flow_dissector.h

net: extract port range fields from fl_flow_key

2025-03-13 12:47:29 +01:00

flow_offload.h

net: extract port range fields from fl_flow_key

2025-03-13 12:47:29 +01:00

flow.h

net: Add l3mdev index to flow struct and avoid oif reset for port devices

2024-10-17 15:08:35 +02:00

fou.h

…

fq_impl.h

…

fq.h

…

garp.h

…

gen_stats.h

…

genetlink.h

genetlink: hold RCU in genlmsg_mcast()

2024-11-08 16:21:57 +01:00

geneve.h

…

gre.h

…

gro_cells.h

…

gtp.h

…

gue.h

…

hwbm.h

…

icmp.h

…

ieee80211_radiotap.h

…

ieee802154_netdev.h

net: ieee802154: return -EINVAL for unknown addr type

2022-10-26 13:25:55 +02:00

if_inet6.h

net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX

2023-12-20 15:44:27 +01:00

ife.h

…

ila.h

…

inet6_connection_sock.h

…

inet6_hashtables.h

net: remove duplicate reuseport_lookup functions

2024-06-16 13:32:06 +02:00

inet_common.h

…

inet_connection_sock.h

tcp/dccp: allow a connection when sk_max_ack_backlog is zero

2025-02-01 18:22:19 +01:00

inet_ecn.h

…

inet_frag.h

inet: frags: annotate races around fqdir->dead and fqdir->high_thresh

2022-01-27 10:54:33 +01:00

inet_hashtables.h

net: remove duplicate reuseport_lookup functions

2024-06-16 13:32:06 +02:00

inet_sock.h

net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set

2022-08-21 15:15:51 +02:00

inet_timewait_sock.h

…

inetpeer.h

…

ip6_checksum.h

…

ip6_fib.h

ipv6: annotate accesses to fn->fn_sernum

2022-02-01 17:25:44 +01:00

ip6_route.h

…

ip6_tunnel.h

ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode

2022-05-09 09:05:04 +02:00

ip_fib.h

ipv4/fib: send notify when delete source address routes

2023-10-25 11:54:23 +02:00

ip_tunnels.h

net/ip6_tunnel: Prevent perpetual tunnel growth

2025-10-29 14:01:19 +01:00

ip_vs.h

ipvs: Update width of source for ip_vs_sync_conn_options

2023-05-30 12:57:49 +01:00

ip.h

ipv4: ignore dst hint for multipath routes

2023-09-19 12:20:26 +02:00

ipcomp.h

…

ipconfig.h

…

ipv6_frag.h

inet: frags: annotate races around fqdir->dead and fqdir->high_thresh

2022-01-27 10:54:33 +01:00

ipv6_stubs.h

net: ipv6: add fib6_nh_release_dsts stub

2021-12-01 09:19:05 +01:00

ipv6.h

ipv6: fix a race in ip6_sock_set_v6only()

2026-03-04 07:19:47 -05:00

ipx.h

…

iw_handler.h

…

kcm.h

kcm: Serialise kcm_sendmsg() for the same socket.

2024-09-04 13:17:40 +02:00

l3mdev.h

vrf: use RCU protection in l3mdev_l3_out()

2025-03-13 12:47:14 +01:00

lag.h

…

lapb.h

net: lapb: increase LAPB_HEADER_LEN

2024-12-19 18:06:10 +01:00

lib80211.h

…

llc_c_ac.h

…

llc_c_ev.h

…

llc_c_st.h

…

llc_conn.h

…

llc_if.h

…

llc_pdu.h

llc: Drop support for ETH_P_TR_802_2.

2024-02-23 08:41:56 +01:00

llc_s_ac.h

…

llc_s_ev.h

…

llc_s_st.h

…

llc_sap.h

…

llc.h

…

lwtunnel.h

lwt: Check LWTUNNEL_XMIT_CONTINUE strictly

2023-09-19 12:20:09 +02:00

mac80211.h

mac80211: Add support to trigger sta disconnect on hardware restart

2024-11-08 16:22:01 +01:00

mac802154.h

…

macsec.h

net: macsec: indicate next pn update when offloading

2023-10-25 11:54:14 +02:00

mip6.h

…

mld.h

…

mpls_iptunnel.h

…

mpls.h

…

mptcp.h

mptcp: remove MPTCP 'ifdef' in TCP SYN cookies

2023-01-14 10:16:51 +01:00

mrp.h

mrp: introduce active flags to prevent UAF when applicant uninit

2023-01-14 10:16:18 +01:00

ncsi.h

…

ndisc.h

…

neighbour.h

neighbour: delete neigh_lookup_nodev as not used

2023-06-21 15:45:40 +02:00

net_failover.h

…

net_namespace.h

net: defer final 'struct net' free in netns dismantle

2025-05-02 07:41:08 +02:00

net_ratelimit.h

…

netevent.h

…

netlabel.h

…

netlink.h

…

netprio_cgroup.h

…

netrom.h

…

nexthop.h

nexthop: Emit a notification when a nexthop is added

2025-10-02 13:35:46 +02:00

nl802154.h

…

nsh.h

…

p8022.h

…

page_pool.h

…

pie.h

…

ping.h

…

pkt_cls.h

…

pkt_sched.h

net/sched: sch_qfq: Fix null-deref in agg_dequeue

2025-12-07 06:08:06 +09:00

pptp.h

…

protocol.h

tcp/udp: Make early_demux back namespacified.

2022-11-10 18:14:26 +01:00

psample.h

…

psnap.h

…

raw.h

raw: Fix a data-race around sysctl_raw_l3mdev_accept.

2022-07-21 21:20:10 +02:00

rawv6.h

…

red.h

…

regulatory.h

…

request_sock.h

…

rose.h

…

route.h

lsm,selinux: pass flowi_common instead of flowi to the LSM hooks

2022-06-09 10:21:09 +02:00

rpl.h

ipv6: rpl: Fix Route of Death.

2023-06-14 11:09:42 +02:00

rsi_91x.h

…

rtnetlink.h

net: rtnetlink: add bulk delete support flag

2025-10-29 14:01:21 +01:00

rtnh.h

…

sch_generic.h

net_sched: Flush gso_skb list too during ->change()

2025-06-04 14:36:56 +02:00

scm.h

scm: fix MSG_CTRUNC setting condition for SO_PASSSEC

2023-05-17 11:47:47 +02:00

secure_seq.h

secure_seq: use the 64 bits of the siphash for port offset calculation

2022-05-30 09:33:23 +02:00

seg6_hmac.h

…

seg6_local.h

…

seg6.h

…

slhc_vj.h

…

smc.h

…

snmp.h

…

sock_reuseport.h

udp: Update reuse->has_conns under reuseport_lock.

2022-10-30 09:41:19 +01:00

sock.h

inet: Avoid ehash lookup race in inet_ehash_insert()

2026-01-19 13:11:27 +01:00

Space.h

…

stp.h

…

strparser.h

…

switchdev.h

bridge: switchdev: Notify about VLAN protocol changes

2022-12-02 17:39:57 +01:00

tcp_states.h

…

tcp.h

bpf: Clean up sockmap related Kconfigs

2025-06-27 11:04:09 +01:00

timewait_sock.h

…

tipc.h

…

tls_toe.h

…

tls.h

net: tls: Cancel RX async resync request on rcd_delta overflow

2025-12-07 06:08:20 +09:00

transp_v6.h

…

tso.h

…

tun_proto.h

…

udp_tunnel.h

udp: call udp_encap_enable for v6 sockets when enabling encap

2022-04-08 14:39:54 +02:00

udp.h

net: drop UFO packets in udp_rcv_segment()

2025-08-28 16:22:37 +02:00

udplite.h

tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().

2023-04-26 11:27:41 +02:00

vsock_addr.h

…

vxlan.h

vxlan: Fix nexthop hash size

2023-08-11 11:57:50 +02:00

wext.h

…

wimax.h

…

x25.h

…

x25device.h

…

xdp_priv.h

…

xdp_sock_drv.h

…

xdp_sock.h

…

xdp.h

xdp: Allow registering memory model without rxq reference

2024-07-05 09:12:48 +02:00

xfrm.h

Revert "xfrm: destroy xfrm_state synchronously on net exit path"

2026-01-19 13:11:24 +01:00

xsk_buff_pool.h

xsk: Fix unaligned descriptor validation

2023-05-17 11:47:50 +02:00