Sabrina Dubroca
14c137ce30
net: ipv4: don't let PMTU updates increase route MTU ...
[ Upstream commit 28d35bcdd3925e7293408cdb8aa5f2aac5f0d6e3 ]
When an MTU update with PMTU smaller than net.ipv4.route.min_pmtu is
received, we must clamp its value. However, we can receive a PMTU
exception with PMTU < old_mtu < ip_rt_min_pmtu, which would lead to an
increase in PMTU.
To fix this, take the smallest of the old MTU and ip_rt_min_pmtu.
Before this patch, in case of an update, the exception's MTU would
always change. Now, an exception can have only its lock flag updated,
but not the MTU, so we need to add a check on locking to the following
"is this exception getting updated, or close to expiring?" test.
Fixes: d52e5a7e7ca4 ("ipv4: lock mtu in fnhe when received PMTU < net.ipv4.route.min_pmtu")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-02 17:20:31 +02:00
6lowpan: Off by one handling ->nexthdr
2020-01-29 10:24:22 +01:00
9p/virtio: Add cleanup path in p9_virtio_init
2019-08-04 09:33:28 +02:00
vlan: fix memory leak in vlan_dev_set_egress_priority
2020-01-12 11:24:27 +01:00
appletalk: Set error code if register_snap_client failed
2019-12-21 10:41:45 +01:00
net: atm: Fix potential Spectre v1 vulnerabilities
2019-04-27 09:34:40 +02:00
ax25: enforce CAP_NET_RAW for raw sockets
2019-10-05 12:30:15 +02:00
batman-adv: Use explicit tvlv padding for ELP packets
2020-03-20 09:07:56 +01:00
Bluetooth: Fix race condition in hci_release_sock()
2020-02-05 13:05:47 +00:00
netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
2020-01-29 10:24:24 +01:00
caif: reduce stack size with KASAN
2019-05-08 07:19:07 +02:00
can: purge socket error queue on sock destruct
2019-07-10 09:55:33 +02:00
libceph: use kbasename() and kill ceph_file_part()
2019-08-11 12:22:15 +02:00
cgroup, netclassid: periodically release file_lock on classid updating
2020-03-20 09:07:37 +01:00
net: dcb: For wild-card lookups, use priority -1, not 0
2018-09-19 22:47:15 +02:00
dccp: Fix memleak in __feat_register_sp
2020-01-23 08:19:34 +01:00
decnet: fix DN_IFREQ_SIZE
2019-12-05 15:35:12 +01:00
KEYS: DNS: fix parsing multiple options
2018-07-22 14:27:39 +02:00
net: dsa: Fix duplicate frames flooded by learning
2020-04-02 17:20:29 +02:00
net: add annotations on hh->hh_len lockless accesses
2020-01-12 11:24:19 +01:00
hsr: set .netnsok flag
2020-04-02 17:20:31 +02:00
nl802154: add missing attribute validation for dev_type
2020-03-20 09:07:39 +01:00
net: ipv4: don't let PMTU updates increase route MTU
2020-04-02 17:20:31 +02:00
ipv6: restrict IPV6_ADDRFORM operation
2020-03-20 09:07:49 +01:00
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda: Only insert new objects into the global database via setsockopt
2018-09-15 09:43:01 +02:00
net/af_iucv: always register net_device notifier
2020-01-29 10:24:26 +01:00
kcm: switch order of device registration to fix a crash
2019-04-17 08:36:44 +02:00
xfrm: clean up xfrm protocol checks
2019-09-16 08:19:32 +02:00
l2tp: Fix possible NULL pointer dereference
2020-01-29 10:24:23 +01:00
net: ipv6: Remove l3mdev_get_saddr6
2016-09-10 23:12:53 -07:00
lapb: fixed leak of control-blocks.
2019-06-22 08:17:22 +02:00
llc: fix sk_buff refcounting in llc_conn_state_process()
2020-01-29 10:24:33 +01:00
mac80211: rx: avoid RCU list traversal under mutex
2020-03-20 09:07:57 +01:00
net: mac802154: tx: expand tailroom if necessary
2018-09-09 20:01:19 +02:00
mpls, nospec: Sanitize array index in mpls_label_ok()
2018-03-11 16:21:34 +01:00
net/ncsi: Improve HNCDSC AEN handler
2016-10-20 11:23:08 -04:00
netfilter: cthelper: add missing attribute validation for cthelper
2020-03-20 09:07:46 +01:00
netlabel: fix out-of-bounds memory accesses
2019-03-13 14:04:53 -07:00
net: netlink: cap max groups which will be considered in netlink_bind()
2020-03-11 07:53:07 +01:00
netrom: hold sock when setting skb->destructor
2019-08-04 09:33:35 +02:00
nfc: add missing attribute validation for vendor subcommand
2020-03-20 09:07:40 +01:00
openvswitch: support asymmetric conntrack
2019-12-21 10:42:23 +01:00
packet: fix data-race in fanout_flow_is_huge()
2020-01-29 10:24:35 +01:00
phonet: fix building with clang
2019-03-23 13:19:44 +01:00
net: qrtr: Stop rx_worker before freeing node
2019-10-05 12:30:13 +02:00
net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
2020-01-29 10:24:32 +01:00
rfkill: Fix incorrect check to avoid NULL pointer dereference
2020-01-12 11:24:23 +01:00
net: rose: fix a possible stack overflow
2019-04-03 06:24:14 +02:00
rxrpc: Fix service call disconnection
2020-02-14 16:31:08 -05:00
net_sched: keep alloc_hash updated after hash allocation
2020-04-02 17:20:30 +02:00
sctp: move the format error check out of __sctp_sf_do_9_1_abort
2020-03-11 07:53:05 +01:00
strparser: Fix incorrect strp->need_bytes value.
2018-04-29 11:32:02 +02:00
sunrpc: expiry_time should be seconds not timeval
2020-02-14 16:31:03 -05:00
switchdev: Execute bridge ndos only for bridge ports
2016-10-19 10:58:04 -04:00
tipc: set sysctl_tipc_rmem and named_timeout right range
2020-01-29 10:24:21 +01:00
net: fix warning in af_unix
2019-11-28 18:28:28 +01:00
VSOCK: bind to random port for VMADDR_PORT_ANY
2019-12-05 15:34:26 +01:00
cfg80211: check reg_rule for NULL in handle_channel_custom()
2020-03-20 09:07:57 +01:00
net/x25: fix nonblocking connect
2020-01-29 10:24:41 +01:00
xfrm: clean up xfrm protocol checks
2019-09-16 08:19:32 +02:00
sock: Make sock->sk_stamp thread-safe
2019-01-09 16:16:41 +01:00
compat_ioctl: handle SIOCOUTQNSD
2020-01-23 08:19:36 +01:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2016-10-06 09:52:23 -07:00
14c137ce30