Ido Schimmel c6e6595d5c ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family ... [ Upstream commit 8fed54758cd248cd311a2b5c1e180abef1866237 ] The NETLINK_FIB_LOOKUP netlink family can be used to perform a FIB lookup according to user provided parameters and communicate the result back to user space. However, unlike other users of the FIB lookup API, the upper DSCP bits and the ECN bits of the DS field are not masked, which can result in the wrong result being returned. Solve this by masking the upper DSCP bits and the ECN bits using IPTOS_RT_MASK. The structure that communicates the request and the response is not exported to user space, so it is unlikely that this netlink family is actually in use [1]. [1] https://lore.kernel.org/netdev/ZpqpB8vJU%2FQ6LSqa@debian/ Signed-off-by: Ido Schimmel <idosch@nvidia.com> Reviewed-by: Guillaume Nault <gnault@redhat.com> Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-11-23 23:21:38 +01:00
..
6lowpan
9p	net/9p: fix uninit-value in p9_client_rpc()	2024-11-19 12:27:18 +01:00
802
8021q	gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers	2024-11-23 23:21:04 +01:00
appletalk	appletalk: Fix Use-After-Free in atalk_ioctl	2024-11-18 12:11:49 +01:00
atm	atm: Fix Use-After-Free in do_vcc_ioctl	2024-11-18 12:11:49 +01:00
ax25
batman-adv	batman-adv: fix random jitter calculation	2024-11-19 17:55:48 +01:00
bluetooth	Bluetooth: L2CAP: Fix not validating setsockopt user input	2024-11-23 23:21:36 +01:00
bpf
bpfilter
bridge	net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN	2024-11-23 23:21:04 +01:00
caif
can	can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().	2024-11-23 23:21:18 +01:00
ceph	libceph: fix race between delayed_work() and ceph_monc_stop()	2024-11-19 14:19:45 +01:00
core	net: add more sanity checks to qdisc_pkt_len_init()	2024-11-23 23:21:35 +01:00
dcb
dccp
decnet
dns_resolver	keys, dns: Fix size check of V1 server-list header	2024-11-18 12:12:43 +01:00
dsa
ethernet	gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers	2024-11-23 23:21:04 +01:00
ethtool	ethtool: check device is present when getting link settings	2024-11-23 23:20:55 +01:00
hsr	hsr: Handle failures in module init	2024-11-19 08:44:59 +01:00
ieee802154
ife	net: sched: ife: fix potential use-after-free	2024-11-18 12:11:59 +01:00
ipv4	ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family	2024-11-23 23:21:38 +01:00
ipv6	netfilter: nf_tables: prevent nf_skb_duplicated corruption	2024-11-23 23:21:35 +01:00
iucv	s390/iucv: fix receive buffer virtual vs physical address confusion	2024-11-23 23:20:47 +01:00
kcm	kcm: Serialise kcm_sendmsg() for the same socket.	2024-11-23 23:20:48 +01:00
key
l2tp	l2tp: fix lockdep splat	2024-11-23 23:20:22 +01:00
l3mdev
lapb
llc	llc: call sock_orphan() at release time	2024-11-18 12:13:22 +01:00
mac80211	wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()	2024-11-23 23:21:18 +01:00
mac802154	Revert "net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()"	2024-11-19 14:52:14 +01:00
mpls
mptcp	mptcp: fix sometimes-uninitialized warning	2024-11-23 23:21:29 +01:00
ncm
ncsi	net/ncsi: Fix the multi thread manner of NCSI driver	2024-11-19 14:19:00 +01:00
netfilter	netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS	2024-11-23 23:21:28 +01:00
netlabel	calipso: fix memory leak in netlbl_calipso_add_pass()	2024-11-18 12:12:25 +01:00
netlink	netlink: hold nlk->cb_mutex longer in __netlink_dump_start()	2024-11-23 23:20:45 +01:00
netrom	netrom: Fix a memory leak in nr_heartbeat_expiry()	2024-11-19 14:19:08 +01:00
nfc	nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()	2024-11-19 12:27:10 +01:00
nsh	nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().	2024-11-19 11:32:42 +01:00
openvswitch	openvswitch: Set the skbuff pkt_type for proper pmtud support.	2024-11-19 12:27:09 +01:00
packet	af_packet: Handle outgoing VLAN packets without hardware offloading	2024-11-23 23:20:12 +01:00
phonet	phonet: fix rtm_phonet_notify() skb allocation	2024-11-19 11:32:46 +01:00
psample	psample: Require 'CAP_NET_ADMIN' when joining "packets" group	2024-11-18 12:11:46 +01:00
qrtr	net: qrtr: Update packets cloning when broadcasting	2024-11-23 23:21:28 +01:00
rds	net:rds: Fix possible deadlock in rds_message_put	2024-11-23 23:20:54 +01:00
rfkill	net: rfkill: gpio: set GPIO direction	2024-11-18 12:12:01 +01:00
rose	net/rose: fix races in rose_kill_by_device()	2024-11-18 12:11:59 +01:00
rxrpc	rxrpc: Fix response to PING RESPONSE ACKs to a dead call	2024-11-18 12:13:25 +01:00
sched	net: sched: consistently use rcu_replace_pointer() in taprio_change()	2024-11-23 23:21:38 +01:00
sctp	sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start	2024-11-23 23:21:36 +01:00
skb_tracer
smc	net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined	2024-11-23 23:20:06 +01:00
strparser
sunrpc	net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket	2024-11-23 23:21:09 +01:00
switchdev
tipc	tipc: guard against string buffer overrun	2024-11-23 23:21:38 +01:00
tls	tls: fix missing memory barrier in tls_init	2024-11-19 12:27:09 +01:00
unix	af_unix: Remove put_pid()/put_cred() in copy_peercred().	2024-11-23 23:21:03 +01:00
vmw_vsock	virtio/vsock: fix logic which reduces credit update messages	2024-11-18 12:12:37 +01:00
wimax
wireless	wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors	2024-11-23 23:21:18 +01:00
x25	net/x25: fix incorrect parameter validation in the x25_getsockopt() function	2024-11-19 08:44:50 +01:00
xdp	xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING	2024-11-19 11:32:19 +01:00
xfrm	net: fix __dst_negative_advice() race	2024-11-19 12:27:19 +01:00
compat.c
devres.c
Kconfig
Makefile
socket.c	net: Save and restore msg_namelen in sock_sendmsg	2024-11-18 12:12:07 +01:00
sysctl_net.c
TEST_MAPPING