PWN-Hunter/android_kernel_xiaomi_sdm845
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5f15c0dd7d
android_kernel_xiaomi_sdm845/net
History
Hristo Venev 2a0432d33c net: sit: Unregister catch-all devices 
commit 610f8c0fc8d46e0933955ce13af3d64484a4630a upstream.

A sit interface created without a local or a remote address is linked
into the `sit_net::tunnels_wc` list of its original namespace. When
deleting a network namespace, delete the devices that have been moved.

The following script triggers a null pointer dereference if devices
linked in a deleted `sit_net` remain:

    for i in `seq 1 30`; do
        ip netns add ns-test
        ip netns exec ns-test ip link add dev veth0 type veth peer veth1
        ip netns exec ns-test ip link add dev sit$i type sit dev veth0
        ip netns exec ns-test ip link set dev sit$i netns $$
        ip netns del ns-test
    done
    for i in `seq 1 30`; do
        ip link del dev sit$i
    done

Fixes: 5e6700b3bf ("sit: add support of x-netns")
Signed-off-by: Hristo Venev <hristo@venev.name>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-04-28 12:07:16 +02:00
..
6lowpan
9p net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid 2020-11-10 10:23:54 +01:00
802
8021q
appletalk appletalk: Fix skb allocation size in loopback case 2021-04-07 12:05:39 +02:00
atm atm: fix a memory leak of vcc->user_back 2020-10-01 20:40:12 +02:00
ax25 AX.25: Prevent integer overflows in connect and sendmsg 2020-07-31 16:44:06 +02:00
batman-adv batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field 2021-04-16 11:59:07 +02:00
bluetooth Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data 2021-03-07 11:25:57 +01:00
bridge net: bridge: vlan: fix error return code in __vlan_add() 2020-12-29 13:44:48 +01:00
caif
can
ceph libceph: clear con->out_msg on Policy::stateful_server faults 2020-11-10 10:23:59 +01:00
core neighbour: Disregard DEAD dst in neigh_update 2021-04-28 12:07:15 +02:00
dcb net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands 2021-01-23 15:38:18 +01:00
dccp ipv6: weaken the v4mapped source check 2021-04-07 12:05:38 +02:00
decnet
dns_resolver
dsa
ethernet
hsr net/hsr: Check skb_put_padto() return value 2020-10-01 20:40:01 +02:00
ieee802154 net: ieee802154: forbid monitor for add llsec seclevel 2021-04-28 12:07:15 +02:00
ipv4 netfilter: x_tables: fix compat match/target pad out-of-bound write 2021-04-16 11:59:12 +02:00
ipv6 net: sit: Unregister catch-all devices 2021-04-28 12:07:16 +02:00
ipx
irda
iucv net/af_iucv: set correct sk_protocol for child sockets 2020-12-11 13:37:56 +01:00
kcm
key af_key: relax availability checks for skb size calculation 2021-02-23 13:59:14 +01:00
l2tp l2tp: fix races with ipv4-mapped ipv6 addresses 2021-01-09 13:35:49 +01:00
l3mdev
lapb net: lapb: Copy the skb before sending a packet 2021-02-10 09:09:25 +01:00
llc llc: make sure applications use ARPHRD_ETHER 2020-07-22 09:10:47 +02:00
mac80211 mac80211: choose first enabled channel for monitor 2021-04-10 13:04:44 +02:00
mac802154 net: mac802154: Fix general protection fault 2021-04-16 11:59:10 +02:00
mpls net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 2021-03-17 16:10:13 +01:00
ncsi net/ncsi: Use real net-device for response handler 2021-01-12 19:49:01 +01:00
netfilter netfilter: x_tables: fix compat match/target pad out-of-bound write 2021-04-16 11:59:12 +02:00
netlabel netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist() 2020-11-24 13:02:56 +01:00
netlink genetlink: remove genl_bind 2020-07-22 09:10:48 +02:00
netrom net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node 2020-05-02 17:23:08 +02:00
nfc nfc: Avoid endless loops caused by repeated llcp_sock_connect() 2021-04-16 11:59:06 +02:00
openvswitch openvswitch: handle DNAT tuple collision 2020-10-14 09:48:16 +02:00
packet net/packet: fix overflow in tpacket_rcv 2020-10-14 09:48:13 +02:00
phonet
qrtr net: qrtr: fix a kernel-infoleak in qrtr_recvmsg() 2021-03-30 14:41:42 +02:00
rds rds: Prevent kernel-infoleak in rds_notify_queue_get() 2020-08-21 11:01:49 +02:00
rfkill
rose rose: Fix Null pointer dereference in rose_send_frame() 2020-12-11 13:37:56 +01:00
rxrpc rxrpc: Fix handling of an unsupported token type in rxrpc_read() 2021-01-23 15:38:19 +01:00
sched net: sched: sch_teql: fix null-pointer dereference 2021-04-16 11:59:07 +02:00
sctp net/sctp: fix race condition in sctp_destroy_sock 2021-04-28 12:07:14 +02:00
strparser
sunrpc rpc: fix NULL dereference on kmalloc failure 2021-04-07 12:05:38 +02:00
switchdev
tipc net:tipc: Fix a double free in tipc_sk_mcast_rcv 2021-04-16 11:59:08 +02:00
unix skbuff: fix a data race in skb_queue_len() 2020-10-01 20:40:06 +02:00
vmw_vsock selinux: vsock: Set SID for socket returned by accept() 2021-04-07 12:05:38 +02:00
wimax
wireless cfg80211: remove WARN_ON() in cfg80211_sme_connect 2021-04-16 11:59:09 +02:00
x25 net/x25: prevent a couple of overflows 2020-12-11 13:37:57 +01:00
xfrm xfrm: Fix oops in xfrm_replay_advance_bmp 2021-02-03 23:19:51 +01:00
compat.c net/compat: Add missing sock updates for SCM_RIGHTS 2020-08-21 11:02:08 +02:00
Kconfig
Makefile
socket.c net: Set fput_needed iff FDPUT_FPUT is set 2020-08-21 11:02:04 +02:00
sysctl_net.c