YueHaibing d5dfa383a9 tipc: Fix potential OOB in tipc_link_proto_rcv() ...

[ Upstream commit 743117a997 ]

Fix the potential risk of OOB if skb_linearize() fails in
tipc_link_proto_rcv().

Fixes: 5cbb28a4bf ("tipc: linearize arriving NAME_DISTR and LINK_PROTO buffers")
Signed-off-by: YueHaibing <yuehaibing@huawei.com>
Link: https://lore.kernel.org/r/20221203094635.29024-1-yuehaibing@huawei.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-06-13 14:13:49 +09:00

..

6lowpan

6lowpan: Off by one handling ->nexthdr

2023-05-15 16:44:57 +09:00

9p

net/9p: Fix a potential socket leak in p9_socket_open

2023-06-13 14:13:46 +09:00

802

net/802/garp: fix memleak in garp_request_join()

2023-05-16 11:34:46 +09:00

8021q

vlan: fix memory leak in vlan_dev_set_egress_priority

2023-05-15 16:32:51 +09:00

appletalk

appletalk: Fix skb allocation size in loopback case

2023-05-16 10:49:55 +09:00

atm

net/atm: fix proc_mpc_write incorrect return value

2023-06-13 14:13:37 +09:00

ax25

ax25: Fix NULL pointer dereference in ax25_kill_by_device

2023-05-16 12:45:55 +09:00

batman-adv

batman-adv: Don't expect inter-netns unique iflink indices

2023-05-16 12:46:11 +09:00

bluetooth

Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

2023-06-13 14:13:48 +09:00

bridge

netfilter: br_netfilter: Drop dst references before setting.

2023-06-13 14:13:27 +09:00

caif

net: caif: fix double disconnect client in chnl_net_open()

2023-06-13 14:13:43 +09:00

can

can: bcm: check the result of can_send() in bcm_can_tx()

2023-06-13 14:13:35 +09:00

ceph

libceph: clear con->out_msg on Policy::stateful_server faults

2023-05-16 09:45:38 +09:00

core

net: gso: fix panic on frag_list with mixed head alloc types

2023-06-13 14:13:41 +09:00

dcb

net: dcb: disable softirqs in dcbnl_flush_dev()

2023-05-16 12:44:53 +09:00

dccp

dccp: don't duplicate ccid when cloning dccp sock

2023-05-16 11:46:42 +09:00

decnet

net: decnet: Fix sleeping inside in af_decnet

2023-05-16 11:34:05 +09:00

dns_resolver

KEYS: DNS: fix parsing multiple options

2023-05-12 16:29:40 +09:00

dsa

net: dsa: tag_brcm: Fix skb->fwd_offload_mark location

2023-05-15 17:13:02 +09:00

ethernet

net: add annotations on hh->hh_len lockless accesses

2023-05-15 16:31:00 +09:00

hsr

net: hsr: Fix potential use-after-free

2023-06-13 14:13:46 +09:00

ieee802154

net: ieee802154: fix error return code in dgram_bind()

2023-06-13 14:13:38 +09:00

ipv4

tcp: configurable source port perturb table size

2023-06-13 14:13:46 +09:00

ipv6

tcp/udp: Fix memory leak in ipv6_renew_options().

2023-06-13 14:13:47 +09:00

ipx

ipx: call ipxitf_put() in ioctl error path

2017-05-25 15:44:41 +02:00

irda

irda: Fix memory leak caused by repeated binds of irda socket

2023-05-12 17:27:16 +09:00

iucv

net/af_iucv: set correct sk_protocol for child sockets

2023-05-16 09:50:42 +09:00

kcm

kcm: avoid potential race in kcm_tx_work

2023-06-13 14:13:44 +09:00

key

af_key: Fix send_acquire race with pfkey_register

2023-06-13 14:13:45 +09:00

l2tp

l2tp: fix race in pppol2tp_release with session object destroy

2023-06-13 14:13:12 +09:00

l3mdev

net: ipv6: Remove l3mdev_get_saddr6

2016-09-10 23:12:53 -07:00

lapb

net: lapb: Copy the skb before sending a packet

2023-05-16 10:34:08 +09:00

llc

llc: only change llc->dev when bind() succeeds

2023-05-16 12:47:02 +09:00

mac80211

wifi: mac80211: Fix ack frame idr leak when mesh has no route

2023-06-13 14:13:45 +09:00

mac802154

mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()

2023-06-13 14:13:49 +09:00

mpls

net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0

2023-05-16 10:46:16 +09:00

ncsi

net/ncsi: Use real net-device for response handler

2023-05-16 10:24:55 +09:00

netfilter

ipvs: use explicitly signed chars

2023-06-13 14:13:39 +09:00

netlabel

cipso,calipso: resolve a number of problems with the DOI refcounts

2023-05-16 12:33:58 +09:00

netlink

netlink: do not reset transport header in netlink_recvmsg()

2023-06-13 14:12:48 +09:00

netrom

netrom: Decrease sock refcount when sock timers expire

2023-05-16 11:34:06 +09:00

nfc

NFC: nci: Bounds check struct nfc_target arrays

2023-06-13 14:13:49 +09:00

openvswitch

openvswitch: switch from WARN to pr_warn

2023-06-13 14:13:39 +09:00

packet

packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE

2023-06-13 14:13:46 +09:00

phonet

phonet: refcount leak in pep_sock_accep

2023-05-16 12:30:20 +09:00

qrtr

net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()

2023-05-16 10:49:33 +09:00

rds

net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()

2023-06-13 14:13:33 +09:00

rfkill

rfkill: Fix incorrect check to avoid NULL pointer dereference

2023-05-15 16:32:30 +09:00

rose

rose: Fix NULL pointer dereference in rose_send_frame()

2023-06-13 14:13:40 +09:00

rxrpc

rxrpc: Don't try to resend the request if we're receiving the reply

2023-06-13 14:12:54 +09:00

sched

net: sched: Fix use after free in red_enqueue()

2023-06-13 14:13:39 +09:00

sctp

sctp: read sk->sk_bound_dev_if once in sctp_rcv()

2023-06-13 14:12:54 +09:00

strparser

strparser: Fix incorrect strp->need_bytes value.

2018-04-29 11:32:02 +02:00

sunrpc

SUNRPC: use _bh spinlocking on ->transport_lock

2023-06-13 14:13:27 +09:00

switchdev

switchdev: Execute bridge ndos only for bridge ports

2016-10-19 10:58:04 -04:00

tipc

tipc: Fix potential OOB in tipc_link_proto_rcv()

2023-06-13 14:13:49 +09:00

unix

af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress

2023-05-16 12:33:30 +09:00

vmw_vsock

vsock: Fix memory leak in vsock_connect()

2023-06-13 14:13:23 +09:00

wimax

net:wimax: Fix doucble word "the the" in networking.xml

2015-08-09 22:43:52 -07:00

wireguard

ODROID: Remove some redefined variables.

2023-06-13 14:13:08 +09:00

wireless

wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()

2023-06-13 14:13:26 +09:00

x25

net/x25: Fix skb leak in x25_lapb_receive_frame()

2023-06-13 14:13:43 +09:00

xfrm

xfrm: Update ipcomp_scratches with NULL when freed

2023-06-13 14:13:35 +09:00

compat.c

net: Return the correct errno code

2023-05-16 11:14:47 +09:00

Kconfig

net/wireguard: add WireGuard 1.0.20200712

2023-05-15 17:31:52 +09:00

Makefile

net: split out functions related to registering inflight socket files

2023-05-16 11:34:41 +09:00

socket.c

net: Fix a data-race around sysctl_somaxconn.

2023-06-13 14:13:24 +09:00

sysctl_net.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2016-10-06 09:52:23 -07:00