Hyunwoo Kim 189ff16722 appletalk: Fix Use-After-Free in atalk_ioctl ... Because atalk_ioctl() accesses sk->sk_receive_queue without holding a sk->sk_receive_queue.lock, it can cause a race with atalk_recvmsg(). A use-after-free for skb occurs with the following flow. ``` atalk_ioctl() -> skb_peek() atalk_recvmsg() -> skb_recv_datagram() -> skb_free_datagram() ``` Add sk->sk_receive_queue.lock to atalk_ioctl() to fix this issue. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Signed-off-by: Hyunwoo Kim <v4bel@theori.io> Link: https://lore.kernel.org/r/20231213041056.GA519680@v4bel-B760M-AORUS-ELITE-AX Signed-off-by: Paolo Abeni <pabeni@redhat.com>		2023-12-14 12:02:45 +01:00
..
6lowpan
9p	9p/net: fix possible memory leak in p9_check_errors()	2023-10-27 12:44:13 +09:00
802	net: fill in MODULE_DESCRIPTION()s under net/802*	2023-10-28 11:29:28 +01:00
8021q	net: fill in MODULE_DESCRIPTION()s under net/802*	2023-10-28 11:29:28 +01:00
appletalk	appletalk: Fix Use-After-Free in atalk_ioctl	2023-12-14 12:02:45 +01:00
atm	atm: Fix Use-After-Free in do_vcc_ioctl	2023-12-12 13:14:08 +01:00
ax25	net: implement lockless SO_PRIORITY	2023-10-01 19:09:54 +01:00
batman-adv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-08-24 10:51:39 -07:00
bluetooth	This update includes the following changes:	2023-11-02 16:15:30 -10:00
bpf	bpf: Add __bpf_kfunc_{start,end}_defs macros	2023-11-01 22:33:53 -07:00
bpfilter
bridge	netfilter: nf_conntrack_bridge: initialize err to 0	2023-11-14 16:16:21 +01:00
caif
can	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-10-12 17:07:34 -07:00
ceph	This update includes the following changes:	2023-11-02 16:15:30 -10:00
core	net: prevent mss overflow in skb_segment()	2023-12-13 18:26:25 -08:00
dcb	net: dcb: choose correct policy to parse DCB_ATTR_BCN	2023-08-01 21:07:46 -07:00
dccp	dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.	2023-11-02 12:56:03 +01:00
devlink	netlink: specs: devlink: add forgotten port function caps enum values	2023-11-01 22:13:43 -07:00
dns_resolver
dsa	net: dsa: Rename IFLA_DSA_MASTER to IFLA_DSA_CONDUIT	2023-10-24 13:08:14 -07:00
ethernet
ethtool	ethtool: don't propagate EOPNOTSUPP from dumps	2023-11-29 08:43:27 -08:00
handshake	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-10-26 13:46:28 -07:00
hsr	hsr: Prevent use after free in prp_create_tagged_frame()	2023-11-01 22:26:04 -07:00
ieee802154	sysctl-6.6-rc1	2023-08-29 17:39:15 -07:00
ife
ipv4	Revert "tcp: disable tcp_autocorking for socket when TCP_NODELAY flag is set"	2023-12-13 10:58:54 -08:00
ipv6	net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX	2023-12-08 10:40:51 +00:00
iucv	s390: use control register bit defines	2023-09-19 13:26:57 +02:00
kcm	net: kcm: fill in MODULE_DESCRIPTION()	2023-11-08 18:17:44 -08:00
key	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-08-18 12:44:56 -07:00
l2tp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-10-05 13:16:47 -07:00
l3mdev
lapb
llc	llc: verify mac len before reading mac header	2023-11-01 22:21:32 -07:00
mac80211	wifi: mac80211: use wiphy locked debugfs for sdata/link	2023-11-27 11:25:09 +01:00
mac802154
mctp	mctp: perform route lookups under a RCU read-side lock	2023-10-10 19:43:22 -07:00
mpls	networking: Update to register_net_sysctl_sz	2023-08-15 15:26:18 -07:00
mptcp	mptcp: fix uninit-value in mptcp_incoming_options	2023-11-24 14:58:33 +00:00
ncsi	Revert ncsi: Propagate carrier gain/loss events to the NCSI controller	2023-11-15 09:59:44 +00:00
netfilter	netfilter: xt_owner: Fix for unsafe access of sk->sk_socket	2023-12-06 17:52:15 +01:00
netlabel	netlabel: Remove unused declaration netlbl_cipsov4_doi_free()	2023-08-02 12:28:22 -07:00
netlink	drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group	2023-12-07 09:54:02 -08:00
netrom	net: implement lockless SO_PRIORITY	2023-10-01 19:09:54 +01:00
nfc	nfc: nci: fix possible NULL pointer dereference in send_acknowledge()	2023-10-16 17:34:53 -07:00
nsh
openvswitch	net/sched: act_ct: Always fill offloading tuple iifidx	2023-11-08 17:47:08 -08:00
packet	packet: Move reference count in packet_sock to atomic_long_t	2023-12-04 14:45:04 -08:00
phonet
psample	psample: Require 'CAP_NET_ADMIN' when joining "packets" group	2023-12-07 09:54:02 -08:00
qrtr
rds	net: prevent address rewrite in kernel_bind()	2023-10-01 19:31:29 +01:00
rfkill	net: rfkill: reduce data->mtx scope in rfkill_fop_open	2023-10-11 16:55:10 +02:00
rose	net/rose: Fix Use-After-Free in rose_ioctl	2023-12-12 13:24:58 +01:00
rxrpc	rxrpc: Defer the response to a PING ACK until we've parsed it	2023-11-17 02:50:33 +00:00
sched	net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table	2023-12-11 09:59:58 +00:00
sctp	net: fill in MODULE_DESCRIPTION()s for SOCK_DIAG modules	2023-11-19 20:09:13 +00:00
smc	net/smc: fix missing byte order conversion in CLC handshake	2023-12-07 10:10:56 -08:00
strparser
sunrpc	NFS client updates for Linux 6.7	2023-11-08 13:39:16 -08:00
switchdev	net: switchdev: Add a helper to replay objects on a bridge port	2023-07-21 08:54:03 +01:00
tipc	net: fill in MODULE_DESCRIPTION()s for SOCK_DIAG modules	2023-11-19 20:09:13 +00:00
tls	net: tls, update curr on splice as well	2023-12-07 09:52:28 -08:00
unix	bpf, sockmap: af_unix stream sockets need to hold ref for pair sock	2023-11-30 00:25:16 +01:00
vmw_vsock	vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space()	2023-12-13 17:59:08 -08:00
wireless	wifi: cfg80211: add locked debugfs wrappers	2023-11-27 11:24:58 +01:00
x25	net: implement lockless SO_PRIORITY	2023-10-01 19:09:54 +01:00
xdp	xsk: Skip polling event check for unbound socket	2023-12-05 13:43:43 +01:00
xfrm	Including fixes from netfilter and bpf.	2023-11-09 17:09:35 -08:00
compat.c
devres.c
Kconfig	net: add skb_segment kunit test	2023-10-11 10:39:01 +01:00
Kconfig.debug
Makefile
socket.c	bpf: Add __bpf_hook_{start,end} macros	2023-11-01 22:33:53 -07:00
sysctl_net.c	sysctl: Add size to register_net_sysctl function	2023-08-15 15:26:17 -07:00