Florian Westphal
21b27b2baa
netfilter: nf_queue: fix possible use-after-free
...
commit c3873070247d9e3c7a6b0cf9bf9b45e8018427b1 upstream.
Eric Dumazet says:
The sock_hold() side seems suspect, because there is no guarantee
that sk_refcnt is not already 0.
On failure, we cannot queue the packet and need to indicate an
error. The packet will be dropped by the caller.
v2: split skb prefetch hunk into separate change
Fixes: 271b72c7fa ("udp: RCU handling for Unicast packets.")
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-08 19:00:57 +01:00
..
acpi
ACPI: scan: Use unique number for instance_no
2021-03-30 14:41:41 +02:00
asm-generic
hugetlbfs: flush TLBs correctly after huge_pmd_unshare
2021-12-08 08:45:03 +01:00
clocksource
crypto
crypto: public_key: fix overflow during implicit conversion
2021-09-22 11:43:03 +02:00
drm
drm: mst: Fix query_payload ack reply struct
2020-01-04 13:39:00 +01:00
dt-bindings
dt-bindings: reset: meson8b: fix duplicate reset IDs
2020-01-23 08:19:38 +01:00
keys
KEYS: user: Align the payload buffer
2019-02-27 10:07:00 +01:00
kvm
arm/arm64: KVM: Add PSCI version selection API
2018-05-09 09:50:19 +02:00
linux
net: fix information leakage in /proc/net/ptype
2022-02-08 18:15:27 +01:00
math-emu
math-emu/soft-fp.h: (_FP_ROUND_ZERO) cast 0 to void to fix warning
2019-12-21 10:41:02 +01:00
media
media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros
2020-02-28 15:42:24 +01:00
memory
misc
net
netfilter: nf_queue: fix possible use-after-free
2022-03-08 19:00:57 +01:00
pcmcia
ras
rdma
IB/cma: Fix reference count leak when no ipv4 addresses are set
2020-06-03 08:16:33 +02:00
rxrpc
scsi
scsi: iscsi: Add iscsi_cls_conn refcount helpers
2021-07-20 16:21:11 +02:00
soc
irqchip/eznps: Fix build error for !ARC700 builds
2020-09-23 08:46:10 +02:00
sound
ALSA: compress: fix partial_drain completion state
2020-07-22 09:10:45 +02:00
target
scsi: target: Fix ordered tag handling
2021-11-26 11:48:41 +01:00
trace
memcg: fix a crash in wb_workfn when a device disappears
2021-02-23 13:59:15 +01:00
uapi
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
video
udlfb: set optimal write delay
2018-09-09 20:01:25 +02:00
xen
xen: sync include/xen/interface/io/ring.h with Xen's newest version
2021-12-08 08:45:04 +01:00
Kbuild