Pablo Neira Ayuso 42ea0c1913 netfilter: ctnetlink: use helper function to calculate expect ID ... [ Upstream commit 782161895eb4ac45cf7cfa8db375bd4766cb8299 ] Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace. Fixes: 3c79107631db ("netfilter: ctnetlink: don't use conntrack/expect object addresses as id") Reported-by: zdi-disclosures@trendmicro.com Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-11-23 23:20:11 +01:00
..
6lowpan
9p	net/9p: fix uninit-value in p9_client_rpc()	2024-11-19 12:27:18 +01:00
802
8021q	vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING	2024-11-18 12:13:00 +01:00
appletalk	appletalk: Fix Use-After-Free in atalk_ioctl	2024-11-18 12:11:49 +01:00
atm	atm: Fix Use-After-Free in do_vcc_ioctl	2024-11-18 12:11:49 +01:00
ax25
batman-adv	batman-adv: fix random jitter calculation	2024-11-19 17:55:48 +01:00
bluetooth	Bluetooth: hci_core: cancel all works upon hci_unregister_dev()	2024-11-19 14:19:50 +01:00
bpf
bpfilter
bridge	net: bridge: fix multicast-to-unicast with fraglist GSO	2024-11-19 11:32:43 +01:00
caif
can	net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new	2024-11-19 14:19:34 +01:00
ceph	libceph: fix race between delayed_work() and ceph_monc_stop()	2024-11-19 14:19:45 +01:00
core	xdp: fix invalid wait context of page_pool_destroy()	2024-11-23 23:20:08 +01:00
dcb
dccp	dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.	2024-11-18 11:43:07 +01:00
decnet
dns_resolver	keys, dns: Fix size check of V1 server-list header	2024-11-18 12:12:43 +01:00
dsa
ethernet	ethernet: Add helper for assigning packet type when dest address does not match device address	2024-11-19 11:32:39 +01:00
ethtool	ethtool: netlink: do not return SQI value if link is down	2024-11-19 14:19:43 +01:00
hsr	hsr: Handle failures in module init	2024-11-19 08:44:59 +01:00
ieee802154
ife	net: sched: ife: fix potential use-after-free	2024-11-18 12:11:59 +01:00
ipv4	net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP	2024-11-23 23:20:06 +01:00
ipv6	net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP	2024-11-23 23:20:06 +01:00
iucv	net/iucv: Avoid explicit cpumask var allocation on stack	2024-11-19 14:19:32 +01:00
kcm	net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function	2024-11-19 08:44:50 +01:00
key
l2tp	net l2tp: drop flow hash on forward	2024-11-19 11:32:42 +01:00
l3mdev
lapb
llc	llc: call sock_orphan() at release time	2024-11-18 12:13:22 +01:00
mac80211	wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()	2024-11-19 14:19:47 +01:00
mac802154	Revert "net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()"	2024-11-19 14:52:14 +01:00
mpls
mptcp	mptcp: pm: update add_addr counters after connect	2024-11-19 14:19:05 +01:00
ncm
ncsi	net/ncsi: Fix the multi thread manner of NCSI driver	2024-11-19 14:19:00 +01:00
netfilter	netfilter: ctnetlink: use helper function to calculate expect ID	2024-11-23 23:20:11 +01:00
netlabel	calipso: fix memory leak in netlbl_calipso_add_pass()	2024-11-18 12:12:25 +01:00
netlink	netlink: annotate lockless accesses to nlk->max_recvmsg_len	2024-11-19 12:26:38 +01:00
netrom	netrom: Fix a memory leak in nr_heartbeat_expiry()	2024-11-19 14:19:08 +01:00
nfc	nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()	2024-11-19 12:27:10 +01:00
nsh	nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().	2024-11-19 11:32:42 +01:00
openvswitch	openvswitch: Set the skbuff pkt_type for proper pmtud support.	2024-11-19 12:27:09 +01:00
packet	af_packet: avoid a false positive warning in packet_setsockopt()	2024-11-19 14:19:06 +01:00
phonet	phonet: fix rtm_phonet_notify() skb allocation	2024-11-19 11:32:46 +01:00
psample	psample: Require 'CAP_NET_ADMIN' when joining "packets" group	2024-11-18 12:11:46 +01:00
qrtr
rds	net/rds: fix possible cp null dereference	2024-11-19 09:22:45 +01:00
rfkill	net: rfkill: gpio: set GPIO direction	2024-11-18 12:12:01 +01:00
rose	net/rose: fix races in rose_kill_by_device()	2024-11-18 12:11:59 +01:00
rxrpc	rxrpc: Fix response to PING RESPONSE ACKs to a dead call	2024-11-18 12:13:25 +01:00
sched	net/sched: Fix UAF when resolving a clash	2024-11-19 14:19:44 +01:00
sctp	sctp: prefer struct_size over open coded arithmetic	2024-11-19 14:19:40 +01:00
skb_tracer
smc	net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined	2024-11-23 23:20:06 +01:00
strparser
sunrpc	SUNRPC: avoid soft lockup when transmitting UDP to reachable server.	2024-11-23 23:20:09 +01:00
switchdev
tipc	tipc: force a dst refcount before doing decryption	2024-11-19 14:19:08 +01:00
tls	tls: fix missing memory barrier in tls_init	2024-11-19 12:27:09 +01:00
unix	af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().	2024-11-19 14:19:01 +01:00
vmw_vsock	virtio/vsock: fix logic which reduces credit update messages	2024-11-18 12:12:37 +01:00
wimax
wireless	wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()	2024-11-23 23:20:07 +01:00
x25	net/x25: fix incorrect parameter validation in the x25_getsockopt() function	2024-11-19 08:44:50 +01:00
xdp	xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING	2024-11-19 11:32:19 +01:00
xfrm	net: fix __dst_negative_advice() race	2024-11-19 12:27:19 +01:00
compat.c
devres.c
Kconfig
Makefile
socket.c	net: Save and restore msg_namelen in sock_sendmsg	2024-11-18 12:12:07 +01:00
sysctl_net.c
TEST_MAPPING