| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-Id: <20181018.171914.1210096727703399564.davem@davemloft.net>
Date: Thu, 18 Oct 2018 17:19:14 -0700 (PDT)
From: David Miller <davem@...emloft.net>
To: gregkh@...uxfoundation.org
CC: akpm@...ux-foundation.org, netdev@...r.kernel.org,
linux-kernel@...r.kernel.org
Subject: [GIT] Networking
1) Fix gro_cells leak in xfrm layer, from Li RongQing.
2) BPF selftests change RLIMIT_MEMLOCK blindly, don't do that.
From Eric Dumazet.
3) AF_XDP calls synchronize_net() under RCU lock, fix from Björn
Töpel.
4) Out of bounds packet access in _decode_session6(), from Alexei
Starovoitov.
5) Several ethtool bugs, where we copy a struct into the kernel
twice and our validations of the values in the first copy can
be invalidated by the second copy due to asynchronous updates
to the memory by the user. From Wenwen Wang.
6) Missing netlink attribute validation in cls_api, from Davide
Caratti.
7) LLC SAP sockets neet to be SOCK_RCU FREE, from Cong Wang.
8) rxrpc operates on wrong kvec, from Yue Haibing.
9) A regression was introduced by the disassosciation of route
neighbour references in rt6_probe(), causing probe for
neighbourless routes to not be properly rate limited. Fix
from Sabrina Dubroca.
10) Unsafe RCU locking in tipc, from Tung Nguyen.
11) Use after free in inet6_mc_check(), from Eric Dumazet.
12) PMTU from icmp packets should update the SCTP transport
pathmtu, from Xin Long.
13) Missing peer put on error in rxrpc, from David Howells.
14) Fix pedit in nfp driver, from Pieter Jansen van Vuuren.
15) Fix overflowing shift statement in qla3xxx driver, from Nathan
Chancellor.
16) Fix Spectre v1 in ptp code, from Gustavo A. R. Silva.
17) udp6_unicast_rcv_skb() interprets udpv6_queue_rcv_skb() return
value in an inverted manner, fix from Paolo Abeni.
18) Fix missed unresolved entries in ipmr dumps, from Nikolay
Aleksandrov.
19) Fix NAPI handling under high load, we can completely miss events
when NAPI has to loop more than one time in a cycle. From Heiner
Kallweit.
Please pull, thanks a lot!
The following changes since commit bab5c80b211035739997ebd361a679fa85b39465:
Merge tag 'armsoc-fixes-4.19' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc (2018-10-12 17:41:27 +0200)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git
for you to fetch changes up to d4d576f5ab7edcb757bb33e6a5600666a0b1232d:
ip6_tunnel: Fix encapsulation layout (2018-10-18 16:54:40 -0700)
----------------------------------------------------------------
Ake Koomsin (1):
virtio_net: avoid using netif_tx_disable() for serializing tx routine
Alexei Starovoitov (1):
net/xfrm: fix out-of-bounds packet access
Björn Töpel (1):
xsk: do not call synchronize_net() under RCU read lock
Colin Ian King (1):
qed: fix spelling mistake "Ireelevant" -> "Irrelevant"
Cong Wang (1):
llc: set SOCK_RCU_FREE in llc_sap_add_socket()
David Howells (3):
rxrpc: Fix an uninitialised variable
rxrpc: Fix incorrect conditional on IPV6
rxrpc: Fix a missing rxrpc_put_peer() in the error_report handler
David S. Miller (5):
Merge git://git.kernel.org/.../bpf/bpf
Merge tag 'mlx5-fixes-2018-10-10' of git://git.kernel.org/.../saeed/linux
Merge branch 'nfp-fix-pedit-set-action-offloads'
Merge branch 'geneve-vxlan-mtu'
Merge branch 'master' of git://git.kernel.org/.../klassert/ipsec
Davide Caratti (1):
net/sched: cls_api: add missing validation of netlink attributes
Eric Dumazet (2):
bpf: do not blindly change rlimit in reuseport net selftest
ipv6: mcast: fix a use-after-free in inet6_mc_check
Florian Fainelli (1):
net: bcmgenet: Poll internal PHY for GENETv5
Florian Westphal (1):
xfrm: policy: use hlist rcu variants on insert
Fugang Duan (1):
net: fec: don't dump RX FIFO register when not available
Gregory CLEMENT (1):
net: mscc: ocelot: Fix comment in ocelot_vlant_wait_for_completion()
Gustavo A. R. Silva (1):
ptp: fix Spectre v1 vulnerability
Heiner Kallweit (2):
r8169: re-enable MSI-X on RTL8168g
r8169: fix NAPI handling under high load
Huy Nguyen (1):
net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
Ido Schimmel (1):
mlxsw: core: Fix use-after-free when flashing firmware during init
Jian-Hong Pan (1):
r8169: Enable MSI-X on RTL8106e
Jon Maloy (2):
tipc: initialize broadcast link stale counter correctly
tipc: fix info leak from kernel tipc_event
Li RongQing (1):
xfrm: fix gro_cells leak when remove virtual xfrm interfaces
Marcelo Ricardo Leitner (1):
sctp: fix race on sctp_id2asoc
Nathan Chancellor (1):
net: qla3xxx: Remove overflowing shift statement
Nikolay Aleksandrov (1):
net: ipmr: fix unresolved entry dumps
Paolo Abeni (1):
udp6: fix encap return code for resubmitting
Phil Sutter (1):
net: sched: Fix for duplicate class dump
Pieter Jansen van Vuuren (3):
nfp: flower: fix pedit set actions for multiple partial masks
nfp: flower: fix multiple keys per pedit action
nfp: flower: use offsets provided by pedit instead of index for ipv6
Sabrina Dubroca (1):
ipv6: rate-limit probes for neighbourless routes
Stefano Brivio (3):
geneve, vxlan: Don't check skb_dst() twice
geneve, vxlan: Don't set exceptions if skb->len < mtu
ip6_tunnel: Fix encapsulation layout
Steffen Klassert (1):
MAINTAINERS: Remove net/core/flow.c
Taehee Yoo (1):
net: bpfilter: use get_pid_task instead of pid_task
Talat Batheesh (1):
net/mlx5: Fix memory leak when setting fpga ipsec caps
Tariq Toukan (1):
net/mlx5: WQ, fixes for fragmented WQ buffers API
Tung Nguyen (1):
tipc: fix unsafe rcu locking when accessing publication list
Wenwen Wang (3):
ethtool: fix a missing-check bug
ethtool: fix a privilege escalation bug
net: socket: fix a missing-check bug
Xin Long (4):
sctp: use the pmtu from the icmp packet to update transport pathmtu
sctp: get pr_assoc and pr_stream all status with SCTP_PR_SCTP_ALL instead
sctp: not free the new asoc when sctp_wait_for_connect returns err
sctp: fix the data size calculation in sctp_data_size
YueHaibing (1):
rxrpc: use correct kvec num when sending BUSY response packet
MAINTAINERS | 1 -
drivers/net/ethernet/broadcom/genet/bcmmii.c | 7 +++++--
drivers/net/ethernet/freescale/fec.h | 4 ++++
drivers/net/ethernet/freescale/fec_main.c | 16 ++++++++++++----
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 12 +++++-------
drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 22 +++++++++++-----------
drivers/net/ethernet/mellanox/mlx5/core/eq.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/fpga/ipsec.c | 9 ++++-----
drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.h | 5 ++---
drivers/net/ethernet/mellanox/mlx5/core/wq.c | 5 -----
drivers/net/ethernet/mellanox/mlx5/core/wq.h | 11 +++++------
drivers/net/ethernet/mellanox/mlxsw/core.c | 2 ++
drivers/net/ethernet/mellanox/mlxsw/core.h | 4 ++++
drivers/net/ethernet/mellanox/mlxsw/core_hwmon.c | 17 +++++++++++------
drivers/net/ethernet/mscc/ocelot.c | 6 +++---
drivers/net/ethernet/netronome/nfp/flower/action.c | 51 +++++++++++++++++++++++++++++++++------------------
drivers/net/ethernet/qlogic/qed/qed_int.c | 2 +-
drivers/net/ethernet/qlogic/qla3xxx.c | 2 --
drivers/net/ethernet/realtek/r8169.c | 20 +++++---------------
drivers/net/geneve.c | 14 +++-----------
drivers/net/virtio_net.c | 5 ++++-
drivers/net/vxlan.c | 12 ++----------
drivers/ptp/ptp_chardev.c | 4 ++++
include/linux/mlx5/driver.h | 8 ++++++++
include/net/dst.h | 10 ++++++++++
include/net/ip6_fib.h | 4 ++++
include/net/sctp/sm.h | 2 +-
include/net/sctp/structs.h | 2 ++
include/uapi/linux/sctp.h | 1 +
kernel/bpf/xskmap.c | 10 ++--------
net/bpfilter/bpfilter_kern.c | 6 ++++--
net/core/ethtool.c | 11 +++++++++--
net/ipv4/ipmr_base.c | 2 --
net/ipv6/ip6_tunnel.c | 10 +++++-----
net/ipv6/mcast.c | 16 ++++++++--------
net/ipv6/route.c | 12 ++++++------
net/ipv6/udp.c | 6 ++----
net/ipv6/xfrm6_policy.c | 4 ++--
net/llc/llc_conn.c | 1 +
net/rxrpc/call_accept.c | 2 +-
net/rxrpc/local_object.c | 2 +-
net/rxrpc/output.c | 3 ++-
net/rxrpc/peer_event.c | 1 +
net/sched/cls_api.c | 13 ++++++++-----
net/sched/sch_api.c | 11 ++++++-----
net/sctp/associola.c | 3 ++-
net/sctp/input.c | 1 +
net/sctp/output.c | 6 ++++++
net/sctp/socket.c | 17 +++++++++--------
net/socket.c | 11 ++++++++---
net/tipc/group.c | 1 +
net/tipc/link.c | 1 +
net/tipc/name_distr.c | 4 ++--
net/xdp/xsk.c | 2 ++
net/xfrm/xfrm_interface.c | 3 +++
net/xfrm/xfrm_policy.c | 8 ++++----
tools/testing/selftests/net/reuseport_bpf.c | 13 +++++++++----
57 files changed, 253 insertions(+), 187 deletions(-)
Powered by blists - more mailing lists