Vasily Averin
2768cc120e
netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 ...
Could you please push this patch into stable@?
it fixes memory corruption in kernels v3.5 .. v4.10
Lost .data_len definition leads to write beyond end of
struct nf_ct_h323_master. Usually it corrupts following
struct nf_conn_nat, however if nat is not loaded it corrupts
following slab object.
In mainline this problem went away in v4.11,
after commit 9f0f3ebeda47 ("netfilter: helpers: remove data_len usage
for inkernel helpers") however many stable kernels are still affected.
Fixes: 1afc56794estable@vger.kernel.org
Reviewed-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Vasily Averin <vvs@virtuozzo.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: I1be5c5548bf14faa12461bb3b2d5ecaf13a37ea2
Git-commit: 396ba2fc4fhttps://android.googlesource.com/kernel/msm
Signed-off-by: Revanth Kumar Uppala <urevanth@codeaurora.org>
2021-05-18 14:15:51 +05:30
6lowpan: Off by one handling ->nexthdr
2020-01-29 10:24:22 +01:00
9p/virtio: Add cleanup path in p9_virtio_init
2019-08-04 09:33:28 +02:00
vlan: fix memory leak in vlan_dev_set_egress_priority
2020-01-12 11:24:27 +01:00
appletalk: Set error code if register_snap_client failed
2019-12-21 10:41:45 +01:00
net: atm: Fix potential Spectre v1 vulnerabilities
2019-04-27 09:34:40 +02:00
ax25: fix setsockopt(SO_BINDTODEVICE)
2020-06-03 08:16:22 +02:00
batman-adv: Fix refcnt leak in batadv_v_ogm_process
2020-05-20 08:15:29 +02:00
This is the 4.9.219 stable release
2020-04-13 13:00:22 +02:00
Merge android-4.9.226(92339d6) into msm-4.9
2020-06-04 11:32:11 +08:00
caif: reduce stack size with KASAN
2019-05-08 07:19:07 +02:00
can: purge socket error queue on sock destruct
2019-07-10 09:55:33 +02:00
libceph: ignore pool overlay and cache logic on redirects
2020-06-03 08:16:41 +02:00
Merge android-4.9.226(92339d6) into msm-4.9
2020-06-04 11:32:11 +08:00
net: ipv6: add net argument to ip6_dst_lookup_flow
2020-05-20 08:15:30 +02:00
decnet: fix DN_IFREQ_SIZE
2019-12-05 15:35:12 +01:00
net: dsa: tag_brcm: Fix skb->fwd_offload_mark location
2020-04-13 10:32:53 +02:00
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
hsr: check protocol version in hsr_newlink()
2020-04-24 07:59:02 +02:00
nl802154: add missing attribute validation for dev_type
2020-03-20 09:07:39 +01:00
net: ipc_router: Fix mhi communication issue
2020-07-08 15:22:21 +05:30
icmp: randomize the global rate limiter
2021-03-25 17:42:30 +05:30
Merge android-4.9.227(892702560) into msm-4.9
2020-06-22 13:43:46 +08:00
net/af_iucv: always register net_device notifier
2020-01-29 10:24:26 +01:00
kcm: switch order of device registration to fix a crash
2019-04-17 08:36:44 +02:00
Merge android-4.9.193 ( 23f8789) into msm-4.9
2019-10-23 14:01:12 +08:00
This is the 4.9.227 stable release
2020-06-11 09:41:53 +02:00
lapb: fixed leak of control-blocks.
2019-06-22 08:17:22 +02:00
llc: fix sk_buff refcounting in llc_conn_state_process()
2020-01-29 10:24:33 +01:00
Merge android-4.9.226(92339d6) into msm-4.9
2020-06-04 11:32:11 +08:00
net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
2020-05-20 08:15:30 +02:00
netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6
2021-05-18 14:15:51 +05:30
netlabel: cope with NULL catmap
2020-05-20 08:15:39 +02:00
Merge android-4.9.216(4ad9bb8) into msm-4.9
2020-03-26 10:35:47 +08:00
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2020-05-02 17:23:08 +02:00
nfc: add missing attribute validation for vendor subcommand
2020-03-20 09:07:40 +01:00
openvswitch: support asymmetric conntrack
2019-12-21 10:42:23 +01:00
Merge android-4.9.212(7e0f964) into msm-4.9
2020-03-13 15:59:38 +08:00
phonet: fix building with clang
2019-03-23 13:19:44 +01:00
Merge "Merge android-4.9.226(92339d6) into msm-4.9"
2020-06-11 12:23:03 -07:00
net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
2020-01-29 10:24:32 +01:00
This is the 4.9.209 stable release
2020-01-12 12:14:52 +01:00
net: rmnet_data: Fix incorrect UL checksum offload logic
2020-07-23 05:24:00 -07:00
net: rose: fix a possible stack overflow
2019-04-03 06:24:14 +02:00
rxrpc: Fix service call disconnection
2020-02-14 16:31:08 -05:00
Merge android-4.9.224(5791e89) into msm-4.9
2020-05-22 14:58:17 +08:00
sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed
2020-06-03 08:16:27 +02:00
This is the 4.9.223 stable release
2020-05-10 11:15:49 +02:00
net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
2020-05-20 08:15:30 +02:00
Merge android-4.9.204(72e8598) into msm-4.9
2020-01-06 18:13:26 +08:00
vsock: fix timeout in vsock_accept()
2020-06-11 09:22:21 +02:00
cfg80211: Support key configuration for Beacon protection (BIGTK)
2020-04-13 14:04:23 +05:30
net/x25: Fix x25_neigh refcnt leak when receiving frame
2020-05-02 17:23:08 +02:00
Merge android-4.9.226(92339d6) into msm-4.9
2020-06-04 11:32:11 +08:00
sock: Make sock->sk_stamp thread-safe
2019-01-09 16:16:41 +01:00
net:sockev: hold file reference till the sock event is sent
2021-03-15 01:35:09 -07:00
2768cc120e