shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-06-05 18:41:58 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
43a07d84dad8dbf1ed7dd13caaa5232d526ad951
linux/net
History
Kyle Zeng fef66e8544 UPSTREAM: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c 
commit 050d91c03b upstream.

The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can
lead to the use of wrong `CIDR_POS(c)` for calculating array offsets,
which can lead to integer underflow. As a result, it leads to slab
out-of-bound access.
This patch adds back the IP_SET_HASH_WITH_NET0 macro to
ip_set_hash_netportnet to address the issue.

Bug: 302199939
Fixes: 886503f34d ("netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net")
Suggested-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Kyle Zeng <zengyhkyle@gmail.com>
Acked-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit a9e6142e5f)
Signed-off-by: Lee Jones <joneslee@google.com>
Change-Id: I11cc1650e7df9d54041164b6bdb01f3a0de46de4
2023-11-06 18:59:19 +00:00
..
6lowpan
…
9p
9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition
2023-04-20 12:35:08 +02:00
802
mrp: introduce active flags to prevent UAF when applicant uninit
2022-12-31 13:33:02 +01:00
8021q
vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
2023-05-24 17:32:47 +01:00
appletalk
…
atm
atm: hide unused procfs functions
2023-06-09 10:34:16 +02:00
ax25
…
batman-adv
Merge 6.1.34 into android14-6.1-lts
2023-06-14 19:49:28 +00:00
bluetooth
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
bpf
Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"
2023-03-17 08:50:32 +01:00
bpfilter
…
bridge
bridge: Add extack warning when enabling STP in netns.
2023-07-27 08:50:40 +02:00
caif
net: caif: Fix use-after-free in cfusbl_device_notify()
2023-03-17 08:50:24 +01:00
can
Merge branch 'android14-6.1' into 'android14-6.1-lts'
2023-08-23 18:31:43 +00:00
ceph
UPSTREAM: libceph: harden msgr2.1 frame segment length checks
2023-10-24 17:39:17 +00:00
core
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
dcb
…
dccp
UPSTREAM: dccp: Call inet6_destroy_sock() via sk->sk_destruct().
2023-05-16 17:26:14 +00:00
dns_resolver
…
dsa
net: dsa: sja1105: always enable the send_meta options
2023-07-19 16:22:06 +02:00
ethernet
…
ethtool
ethtool: Fix uninitialized number of lanes
2023-05-17 11:53:37 +02:00
hsr
hsr: ratelimit only when errors are printed
2023-04-06 12:10:58 +02:00
ieee802154
net: ieee802154: fix error return code in dgram_bind()
2022-10-07 09:29:17 +02:00
ife
…
ipv4
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
ipv6
Merge 6.1.43 into android14-6.1-lts
2023-09-12 12:36:39 +00:00
iucv
net/iucv: Fix size of interrupt data
2023-03-22 13:33:50 +01:00
kcm
kcm: close race conditions on sk_receive_queue
2022-11-15 12:42:26 +01:00
key
af_key: Reject optional tunnel/BEET mode templates in outbound policies
2023-05-24 17:32:43 +01:00
l2tp
UPSTREAM: inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().
2023-05-16 14:09:57 +00:00
l3mdev
…
lapb
…
llc
llc: Don't drop packet from non-root netns.
2023-07-27 08:50:45 +02:00
mac80211
Merge 6.1.39 into android14-6.1-lts
2023-09-02 19:41:42 +00:00
mac802154
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
2022-12-05 09:53:08 +01:00
mctp
net: mctp: purge receive queues on sk destruction
2023-02-06 08:06:34 +01:00
mpls
net: mpls: fix stale pointer if allocation fails during device rename
2023-02-22 12:59:53 +01:00
mptcp
mptcp: ensure subflow is unhashed before cleaning the backlog
2023-08-03 10:24:18 +02:00
ncsi
net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
2023-07-23 13:49:51 +02:00
netfilter
UPSTREAM: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
2023-11-06 18:59:19 +00:00
netlabel
…
netlink
netlink: Add __sock_i_ino() for __netlink_diag_dump().
2023-07-19 16:21:13 +02:00
netrom
netrom: fix info-leak in nr_write_internal()
2023-06-09 10:34:01 +02:00
nfc
UPSTREAM: net: nfc: Fix use-after-free caused by nfc_llcp_find_local
2023-09-04 12:09:23 +01:00
nsh
net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
2023-05-24 17:32:45 +01:00
openvswitch
net: openvswitch: fix race on port output
2023-04-20 12:35:09 +02:00
packet
af_packet: do not use READ_ONCE() in packet_bind()
2023-06-09 10:34:02 +02:00
phonet
…
psample
…
qrtr
net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
2023-04-20 12:35:09 +02:00
rds
rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
2023-03-10 09:33:02 +01:00
rfkill
…
rose
net/rose: Fix to not accept on connected socket
2023-02-22 12:59:42 +01:00
rxrpc
rxrpc: Fix hard call timeout units
2023-05-17 11:53:35 +02:00
sched
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
sctp
sctp: fix potential deadlock on &net->sctp.addr_wq_lock
2023-07-19 16:22:00 +02:00
smc
net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
2023-06-14 11:15:17 +02:00
strparser
…
sunrpc
SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
2023-07-19 16:21:48 +02:00
switchdev
…
tipc
tipc: stop tipc crypto on failure in tipc_node_create
2023-08-03 10:24:02 +02:00
tls
tls: rx: strp: don't use GFP_KERNEL in softirq context
2023-06-09 10:34:29 +02:00
unix
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
vmw_vsock
Merge 6.1.30 into android14-6.1-lts
2023-06-12 20:48:03 +00:00
wireless
Merge 6.1.42 into android14-6.1-lts
2023-09-06 10:23:12 +00:00
x25
net/x25: Fix to not accept on connected socket
2023-02-09 11:28:13 +01:00
xdp
xsk: Honor SO_BINDTODEVICE on bind
2023-07-19 16:22:05 +02:00
xfrm
Merge tag 'android14-6.1.43_r00' into android14-6.1
2023-10-26 17:34:36 +00:00
compat.c
use less confusing names for iov_iter direction initializers
2023-02-09 11:28:04 +01:00
devres.c
…
Kconfig
…
Kconfig.debug
…
Makefile
…
socket.c
net: annotate sk->sk_err write from do_recvmmsg()
2023-05-24 17:32:32 +01:00
sysctl_net.c
…
TEST_MAPPING
…