Maxim Mikityanskiy f6336724a4 net/tls: Remove the context from the list in tls_device_down ... tls_device_down takes a reference on all contexts it's going to move to the degraded state (software fallback). If sk_destruct runs afterwards, it can reduce the reference counter back to 1 and return early without destroying the context. Then tls_device_down will release the reference it took and call tls_device_free_ctx. However, the context will still stay in tls_device_down_list forever. The list will contain an item, memory for which is released, making a memory corruption possible. Fix the above bug by properly removing the context from all lists before any call to tls_device_free_ctx. Fixes: 3740651bf7 ("tls: Fix context leak on tls_device_down") Signed-off-by: Maxim Mikityanskiy <maximmi@nvidia.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2022-07-24 21:40:56 +01:00
..
6lowpan
9p	xen: switch gnttab_end_foreign_access() to take a struct page pointer	2022-05-27 11:05:29 +02:00
802
8021q	vlan: fix memory leak in vlan_newlink()	2022-07-09 12:26:59 +01:00
appletalk	net: remove noblock parameter from skb_recv_datagram()	2022-04-06 13:45:26 +01:00
atm	net: SO_RCVMARK socket option for SO_MARK with recvmsg()	2022-04-28 13:08:15 -07:00
ax25	net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg	2022-06-15 13:00:22 +01:00
batman-adv	net: wrap the wireless pointers in struct net_device in an ifdef	2022-05-22 21:51:54 +01:00
bluetooth	Bluetooth: core: Fix deadlock on hci_power_on_sync.	2022-07-05 13:20:03 -07:00
bpf	Merge https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2022-05-23 16:07:14 -07:00
bpfilter
bridge	netfilter: br_netfilter: do not skip all hooks with 0 priority	2022-06-27 19:23:27 +02:00
caif	caif: Fix bitmap data type in "struct caifsock"	2022-07-22 12:51:45 +01:00
can	can: bcm: use call_rcu() instead of costly synchronize_rcu()	2022-07-04 10:33:39 +02:00
ceph	libceph: use swap() macro instead of taking tmp variable	2022-05-25 20:45:13 +02:00
core	tcp: Fix data-races around sysctl knobs related to SYN option.	2022-07-20 10:14:49 +01:00
dcb
dccp	Revert "net: Add a second bind table hashed by port and address"	2022-06-16 11:07:59 -07:00
decnet	dn_route: set rt neigh to blackhole_netdev instead of loopback_dev in ifdown	2022-05-17 18:03:23 -07:00
dns_resolver
dsa	net: dsa: fix NULL pointer dereference in dsa_port_reset_vlan_filtering	2022-07-18 20:14:23 -07:00
ethernet	net: ethernet: set default assignment identifier to NET_NAME_ENUM	2022-04-07 21:04:03 -07:00
ethtool	ethtool: Fix get module eeprom fallback	2022-06-17 20:22:16 -07:00
hsr	net: add per-cpu storage and net->core_stats	2022-03-11 23:17:24 -08:00
ieee802154	net: SO_RCVMARK socket option for SO_MARK with recvmsg()	2022-04-28 13:08:15 -07:00
ife
ipv4	Revert "tcp: change pingpong threshold to 3"	2022-07-22 15:09:10 -07:00
ipv6	tcp: Fix data-races around sysctl_tcp_syncookies.	2022-07-18 12:21:54 +01:00
iucv	net: remove noblock parameter from skb_recv_datagram()	2022-04-06 13:45:26 +01:00
kcm
key	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2022-06-01 17:44:04 -07:00
l2tp	ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg	2022-06-08 10:56:43 -07:00
l3mdev	l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu	2022-04-15 14:27:24 -07:00
lapb
llc	llc: only change llc->dev when bind() succeeds	2022-03-25 16:55:41 -07:00
mac80211	wifi: mac80211: fix queue selection for mesh/OCB interfaces	2022-07-11 10:36:55 +02:00
mac802154	net: mac802154: Fix symbol durations	2022-04-30 20:29:47 +02:00
mctp	Networking changes for 5.19.	2022-05-25 12:22:58 -07:00
mpls	net: mpls: fix memdup.cocci warning	2022-04-07 21:06:41 -07:00
mptcp	tcp: Fix data-races around sysctl_tcp_workaround_signed_windows.	2022-07-22 12:06:17 +01:00
ncsi	net/ncsi: use proper "mellanox" DT vendor prefix	2022-06-23 20:51:06 -07:00
netfilter	ip: Fix data-races around sysctl_ip_default_ttl.	2022-07-15 11:49:55 +01:00
netlabel	netlabel: fix out-of-bounds memory accesses	2022-03-21 10:59:11 +00:00
netlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-05-12 16:15:30 -07:00
netrom	net: remove noblock parameter from skb_recv_datagram()	2022-04-06 13:45:26 +01:00
nfc	net: nfc: Directly use ida_alloc()/free()	2022-05-28 15:28:47 +01:00
nsh
openvswitch	net: openvswitch: fix parsing of nw_proto for IPv6 fragments	2022-06-23 11:44:01 +02:00
packet	net/af_packet: make sure to pull mac header	2022-06-02 10:15:05 -07:00
phonet	net: remove noblock parameter from recvmsg() entities	2022-04-12 15:00:25 +02:00
psample
qrtr	net: remove noblock parameter from skb_recv_datagram()	2022-04-06 13:45:26 +01:00
rds	Linux 5.18	2022-05-24 12:40:28 -03:00
rfkill	rfkill: make new event layout opt-in	2022-03-18 13:09:17 +02:00
rose	net: rose: fix UAF bug caused by rose_t0timer_expiry	2022-07-06 19:49:11 -07:00
rxrpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-05-23 21:19:17 -07:00
sched	net/sched: cls_api: Fix flow action initialization	2022-07-20 10:54:27 +01:00
sctp	ip: Fix data-races around sysctl_ip_nonlocal_bind.	2022-07-15 11:49:55 +01:00
smc	tcp: Fix data-races around keepalive sysctl knobs.	2022-07-18 12:21:54 +01:00
strparser
sunrpc	Notable regression fixes:	2022-07-02 11:20:56 -07:00
switchdev
tipc	net: tipc: fix possible refcount leak in tipc_sk_create()	2022-06-29 13:49:06 +01:00
tls	net/tls: Remove the context from the list in tls_device_down	2022-07-24 21:40:56 +01:00
unix	af_unix: Fix a data-race in unix_dgram_peer_wake_me().	2022-06-07 12:07:46 +02:00
vmw_vsock	hyperv-next for 5.19	2022-05-28 11:39:01 -07:00
wireless	wifi: cfg80211: Allow P2P client interface to indicate port authorization	2022-06-29 11:43:15 +02:00
x25	x25: remove redundant pointer dev	2022-05-10 11:59:22 +02:00
xdp	xsk: Clear page contiguity bit when unmapping pool	2022-06-28 22:49:04 +02:00
xfrm	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec	2022-07-20 10:11:58 +01:00
compat.c
devres.c
Kconfig
Kconfig.debug	net: CONFIG_DEBUG_NET depends on CONFIG_NET	2022-06-02 10:15:05 -07:00
Makefile
socket.c	net: clear msg_get_inq in __sys_recvfrom() and __copy_msghdr_from_user()	2022-06-23 20:56:23 -07:00
sysctl_net.c