Toshiaki Makita 6e8cfd6d9d tun: Fix use-after-free on XDP_TX ...

On XDP_TX we need to free up the frame only when tun_xdp_tx() returns a
negative value. A positive value indicates that the packet is
successfully enqueued to the ptr_ring, so freeing the page causes
use-after-free.

Fixes: 735fc4054b ("xdp: change ndo_xdp_xmit API to support bulking")
Signed-off-by: Toshiaki Makita <makita.toshiaki@lab.ntt.co.jp>
Acked-by: Jason Wang <jasowang@redhat.com>
Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-07-16 13:38:29 -07:00

..

appletalk

…

arcnet

…

bonding

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

caif

drivers/net: Use octal not symbolic permissions

2018-03-26 12:07:49 -04:00

can

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

dsa

treewide: devm_kzalloc() -> devm_kcalloc()

2018-06-12 16:19:22 -07:00

ethernet

qlogic: check kstrtoul() for errors

2018-07-13 18:28:58 -07:00

fddi

net: fddi: fix a possible null-ptr-deref

2018-06-08 18:47:46 -04:00

fjes

…

hamradio

net: hamradio: use eth_broadcast_addr

2018-06-20 07:51:43 +09:00

hippi

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

hyperv

hv_netvsc: split sub-channel setup into async and sync

2018-06-30 21:28:36 +09:00

ieee802154

net: ieee802154: adf7242: Fix OCL calibration runs

2018-07-09 10:53:12 +02:00

ipvlan

ipvlan: call dev_change_flags when ipvlan mode is reset

2018-07-02 20:38:09 +09:00

netdevsim

netdevsim: Add extack error message for devlink reload

2018-06-05 12:32:37 -04:00

phy

sfp: fix module initialisation with netdev already up

2018-07-11 23:11:34 -07:00

plip

…

ppp

Revert changes to convert to ->poll_mask() and aio IOCB_CMD_POLL

2018-06-28 10:40:47 -07:00

slip

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

team

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

usb

qmi_wwan: add support for Quectel EG91

2018-07-05 20:22:12 +09:00

vmxnet3

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-05-21 16:01:54 -04:00

wan

treewide: kzalloc() -> kcalloc()

2018-06-12 16:19:22 -07:00

wimax

net: drivers/net: Remove unnecessary skb_copy_expand OOM messages

2018-03-15 14:28:03 -04:00

wireless

Merge tag 'wireless-drivers-for-davem-2018-07-03' of git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers

2018-07-03 23:29:29 +09:00

xen-netback

treewide: Use array_size() in vzalloc()

2018-06-12 16:19:22 -07:00

dummy.c

net: Do not take net_rwsem in __rtnl_link_unregister()

2018-03-31 22:24:58 -04:00

eql.c

…

geneve.c

net: fix use-after-free in GRO with ESP

2018-07-02 20:34:04 +09:00

gtp.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

ifb.c

ifb: fix packets checksum

2018-05-28 23:02:22 -04:00

Kconfig

virtio_net: Extend virtio to use VF datapath when available

2018-05-28 22:59:54 -04:00

LICENSE.SRC

…

loopback.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

macsec.c

Revert "macsec: missing dev_put() on error in macsec_newlink()"

2018-04-16 10:01:12 -04:00

macvlan.c

macvlan: Use software path for offloaded local, broadcast, and multicast traffic

2018-04-25 08:26:19 -07:00

macvtap.c

…

Makefile

net: Introduce net_failover driver

2018-05-28 22:59:54 -04:00

mdio.c

…

mii.c

…

net_failover.c

net: net_failover: fix typo in net_failover_slave_register()

2018-06-20 07:56:44 +09:00

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

net/mac89x0: Convert to platform_driver

2018-03-01 21:21:36 -05:00

sungem_phy.c

…

tap.c

net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds vlan

2018-06-07 16:15:38 -04:00

thunderbolt.c

net: thunderbolt: Run disconnect flow asynchronously when logout is received

2018-02-12 12:03:04 -05:00

tun.c

tun: Fix use-after-free on XDP_TX

2018-07-16 13:38:29 -07:00

veth.c

…

virtio_net.c

virtio_net: split XDP_TX kick and XDP_REDIRECT map flushing

2018-06-28 14:27:52 +09:00

vrf.c

vrf: add CRC32c offload to device features

2018-05-28 22:55:13 -04:00

vsockmon.c

…

vxlan.c

net: fix use-after-free in GRO with ESP

2018-07-02 20:34:04 +09:00

xen-netfront.c

xen-netfront: Update features after registering netdev

2018-06-22 07:54:54 +09:00