netdev - [PATCH 0/6] pull request (net): ipsec 2022-11-23

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 23 Nov 2022 10:31:10 +0100
From:   Steffen Klassert <steffen.klassert@...unet.com>
To:     David Miller <davem@...emloft.net>,
        Jakub Kicinski <kuba@...nel.org>
CC:     Herbert Xu <herbert@...dor.apana.org.au>,
        Steffen Klassert <steffen.klassert@...unet.com>,
        <netdev@...r.kernel.org>
Subject: [PATCH 0/6] pull request (net): ipsec 2022-11-23

1) Fix "disable_policy" on ipv4 early demuxP Packets after
   the initial packet in a flow might be incorectly dropped
   on early demux if there are no matching policies.
   From Eyal Birger.

2) Fix a kernel warning in case XFRM encap type is not
   available. From Eyal Birger.

3) Fix ESN wrap around for GSO to avoid a double usage of a
    sequence number. From Christian Langrock.

4) Fix a send_acquire race with pfkey_register.
   From Herbert Xu.

5) Fix a list corruption panic in __xfrm_state_delete().
   Thomas Jarosch.

6) Fix an unchecked return value in xfrm6_init().
   Chen Zhongjin.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 1d22f78d05737ce21bff7b88b6e58873f35e65ba:

  Merge tag 'ieee802154-for-net-2022-10-05' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan (2022-10-05 20:38:46 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 40781bfb836eda57d19c0baa37c7e72590e05fdc:

  xfrm: Fix ignored return value in xfrm6_init() (2022-11-22 07:16:34 +0100)

----------------------------------------------------------------
Chen Zhongjin (1):
      xfrm: Fix ignored return value in xfrm6_init()

Christian Langrock (1):
      xfrm: replay: Fix ESN wrap around for GSO

Eyal Birger (2):
      xfrm: fix "disable_policy" on ipv4 early demux
      xfrm: lwtunnel: squelch kernel warning in case XFRM encap type is not available

Herbert Xu (1):
      af_key: Fix send_acquire race with pfkey_register

Thomas Jarosch (1):
      xfrm: Fix oops in __xfrm_state_delete()

 net/core/lwtunnel.c     |  4 +++-
 net/ipv4/esp4_offload.c |  3 +++
 net/ipv4/ip_input.c     |  5 +++++
 net/ipv6/esp6_offload.c |  3 +++
 net/ipv6/xfrm6_policy.c |  6 +++++-
 net/key/af_key.c        | 34 +++++++++++++++++++++++-----------
 net/xfrm/xfrm_device.c  | 15 ++++++++++++++-
 net/xfrm/xfrm_replay.c  |  2 +-
 8 files changed, 57 insertions(+), 15 deletions(-)