| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20250925132502.65191-1-pabeni@redhat.com>
Date: Thu, 25 Sep 2025 15:25:02 +0200
From: Paolo Abeni <pabeni@...hat.com>
To: torvalds@...ux-foundation.org
Cc: kuba@...nel.org,
davem@...emloft.net,
netdev@...r.kernel.org,
linux-kernel@...r.kernel.org
Subject: [GIT PULL] Networking for v6.17-rc8
Hi Linus!
The following changes since commit cbf658dd09419f1ef9de11b9604e950bdd5c170b:
Merge tag 'net-6.17-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2025-09-18 10:22:02 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git tags/net-6.17-rc8
for you to fetch changes up to d9c70e93ec5988ab07ad2a92d9f9d12867f02c56:
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (2025-09-25 11:04:34 +0200)
----------------------------------------------------------------
Including fixes from Bluetooth, IPsec and CAN.
No known regressions at this point.
Current release - regressions:
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
Previous releases - regressions:
- xfrm: fix offloading of cross-family tunnels
- bluetooth: fix several races leading to UaFs
- dsa: lantiq_gswip: fix FDB entries creation for the CPU port
- eth: tun: update napi->skb after XDP process
- eth: mlx: fix UAF in flow counter release
Previous releases - always broken:
- core: forbid FDB status change while nexthop is in a group
- smc: fix warning in smc_rx_splice() when calling get_page()
- can: provide missing ndo_change_mtu(), to prevent buffer overflow.
- eth: i40e: fix VF config validation
- eth: broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl
Signed-off-by: Paolo Abeni <pabeni@...hat.com>
----------------------------------------------------------------
Alok Tiwari (1):
bnxt_en: correct offset handling for IPv6 destination address
Calvin Owens (1):
Bluetooth: Fix build after header cleanup
Carolina Jubran (1):
net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD
Chen Yufeng (1):
can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
Dan Carpenter (1):
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
Duy Nguyen (1):
can: rcar_canfd: Fix controller mode setting
Ido Schimmel (3):
nexthop: Forbid FDB status change while nexthop is in a group
selftests: fib_nexthops: Fix creation of non-FDB nexthops
selftests: fib_nexthops: Add test cases for FDB status change
Jacob Keller (4):
broadcom: fix support for PTP_PEROUT_DUTY_CYCLE
broadcom: fix support for PTP_EXTTS_REQUEST2 ioctl
ptp: document behavior of PTP_STRICT_FLAGS
libie: fix string names for AQ error codes
Jakub Kicinski (7):
Merge branch 'broadcom-report-the-supported-flags-for-ancillary-features'
Merge tag 'for-net-2025-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
Merge branch '40GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue
Merge tag 'ipsec-2025-09-22' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec
Merge tag 'linux-can-fixes-for-6.17-20250923' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can
Merge branch 'nexthop-various-fixes'
Merge branch 'mlx5-misc-fixes-2025-09-22'
Jason Baron (1):
net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
Luiz Augusto von Dentz (4):
Bluetooth: hci_sync: Fix hci_resume_advertising_sync
Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue
Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
Bluetooth: MGMT: Fix possible UAFs
Lukasz Czapnik (8):
i40e: add validation for ring_len param
i40e: fix idx validation in i40e_validate_queue_map
i40e: fix idx validation in config queues msg
i40e: fix input validation logic for action_meta
i40e: fix validation of VF state in get resources
i40e: add max boundary check for VF filters
i40e: add mask to apply valid bits for itr_idx
i40e: improve VF MAC filters accounting
Marc Kleine-Budde (1):
Merge patch series "can: populate ndo_change_mtu() to prevent buffer overflow"
Moshe Shemesh (1):
net/mlx5: fs, fix UAF in flow counter release
Paolo Abeni (1):
Merge branch 'lantiq_gswip-fixes'
Petr Malat (1):
ethernet: rvu-af: Remove slash from the driver name
Sabrina Dubroca (2):
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
xfrm: fix offloading of cross-family tunnels
Sidraya Jayagond (1):
net/smc: fix warning in smc_rx_splice() when calling get_page()
Stéphane Grosjean (1):
can: peak_usb: fix shift-out-of-bounds issue
Vincent Mailhol (4):
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
Vladimir Oltean (2):
net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
Wang Liang (1):
net: tun: Update napi->skb after XDP process
Yevgeny Kliteynik (1):
net/mlx5: HWS, ignore flow level for multi-dest table
drivers/bluetooth/Kconfig | 6 +
drivers/bluetooth/hci_uart.h | 8 +-
drivers/net/can/rcar/rcar_canfd.c | 7 +-
drivers/net/can/spi/hi311x.c | 34 +--
drivers/net/can/sun4i_can.c | 1 +
drivers/net/can/usb/etas_es58x/es58x_core.c | 3 +-
drivers/net/can/usb/mcba_usb.c | 1 +
drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +-
drivers/net/dsa/lantiq_gswip.c | 21 +-
drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e.h | 3 +-
drivers/net/ethernet/intel/i40e/i40e_main.c | 26 ++-
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 +++++----
drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 3 +-
drivers/net/ethernet/intel/libie/adminq.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 3 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 1 +
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fs_core.h | 1 +
.../net/ethernet/mellanox/mlx5/core/fs_counters.c | 25 +-
.../mellanox/mlx5/core/steering/hws/action.c | 4 +-
.../mellanox/mlx5/core/steering/hws/fs_hws.c | 11 +-
.../mellanox/mlx5/core/steering/hws/fs_hws_pools.c | 8 +-
.../mellanox/mlx5/core/steering/hws/mlx5hws.h | 3 +-
drivers/net/phy/bcm-phy-ptp.c | 6 +-
drivers/net/tun.c | 3 +
include/linux/mlx5/fs.h | 2 +
include/net/bluetooth/hci_core.h | 21 ++
include/uapi/linux/ptp_clock.h | 3 +
net/bluetooth/hci_event.c | 30 ++-
net/bluetooth/hci_sync.c | 7 +
net/bluetooth/mgmt.c | 259 +++++++++++++++------
net/bluetooth/mgmt_util.c | 46 ++++
net/bluetooth/mgmt_util.h | 3 +
net/core/skbuff.c | 2 +-
net/ipv4/nexthop.c | 7 +
net/smc/smc_loopback.c | 14 +-
net/xfrm/xfrm_device.c | 2 +-
net/xfrm/xfrm_state.c | 3 +
tools/testing/selftests/net/fib_nexthops.sh | 52 ++++-
41 files changed, 548 insertions(+), 201 deletions(-)
Powered by blists - more mailing lists