netdev - [PATCH 0/6] pull request (net): ipsec 2022-08-24

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20220824050213.3643599-1-steffen.klassert@secunet.com>
Date:   Wed, 24 Aug 2022 07:02:07 +0200
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: [PATCH 0/6] pull request (net): ipsec 2022-08-24

1) Fix a refcount leak in __xfrm_policy_check.
   From Xin Xiong.

2) Revert "xfrm: update SA curlft.use_time". This
   violates RFC 2367. From Antony Antony.

3) Fix a comment on XFRMA_LASTUSED.
   From Antony Antony.

4) x->lastused is not cloned in xfrm_do_migrate.
   Fix from Antony Antony.

5) Serialize the calls to xfrm_probe_algs.
   From Herbert Xu.

6) Fix a null pointer dereference of dst->dev on a metadata
   dst in xfrm_lookup_with_ifid. From Nikolay Aleksandrov.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 9b134b1694ec8926926ba6b7b80884ea829245a0:

  bridge: Do not send empty IFLA_AF_SPEC attribute (2022-07-26 15:35:53 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 17ecd4a4db4783392edd4944f5e8268205083f70:

  xfrm: policy: fix metadata dst->dev xmit null pointer dereference (2022-08-17 11:06:37 +0200)

----------------------------------------------------------------
Antony Antony (3):
      Revert "xfrm: update SA curlft.use_time"
      xfrm: fix XFRMA_LASTUSED comment
      xfrm: clone missing x->lastused in xfrm_do_migrate

Herbert Xu (1):
      af_key: Do not call xfrm_probe_algs in parallel

Nikolay Aleksandrov (1):
      xfrm: policy: fix metadata dst->dev xmit null pointer dereference

Xin Xiong (1):
      xfrm: fix refcount leak in __xfrm_policy_check()

 include/uapi/linux/xfrm.h | 2 +-
 net/key/af_key.c          | 3 +++
 net/xfrm/xfrm_input.c     | 1 -
 net/xfrm/xfrm_output.c    | 1 -
 net/xfrm/xfrm_policy.c    | 3 ++-
 net/xfrm/xfrm_state.c     | 1 +
 6 files changed, 7 insertions(+), 4 deletions(-)