lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20231005182140.3847567-1-kuba@kernel.org>
Date: Thu,  5 Oct 2023 11:21:40 -0700
From: Jakub Kicinski <kuba@...nel.org>
To: torvalds@...ux-foundation.org
Cc: kuba@...nel.org,
	davem@...emloft.net,
	netdev@...r.kernel.org,
	linux-kernel@...r.kernel.org,
	pabeni@...hat.com
Subject: [GIT PULL] Networking for v6.6-rc5

Hi Linus!

The following changes since commit 27bbf45eae9ca98877a2d52a92a188147cd61b07:

  Merge tag 'net-6.6-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2023-09-21 11:28:16 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git net-6.6-rc5

for you to fetch changes up to c29d984580212f8a5e75b65c99a745f29511f83a:

  Merge branch 'mptcp-fixes-and-maintainer-email-update-for-v6-6' (2023-10-05 09:34:34 -0700)

----------------------------------------------------------------
Including fixes from Bluetooth, netfilter, BPF and WiFi.

I didn't collect precise data but feels like we've got a lot
of 6.5 fixes here. WiFi fixes are most user-awaited.

Current release - regressions:

 - Bluetooth: fix hci_link_tx_to RCU lock usage

Current release - new code bugs:

 - bpf: mprog: fix maximum program check on mprog attachment

 - eth: ti: icssg-prueth: fix signedness bug in prueth_init_tx_chns()

Previous releases - regressions:

 - ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling

 - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer(),
   it doesn't handle zero length like we expected

 - wifi:
   - cfg80211: fix cqm_config access race, fix crashes with brcmfmac
   - iwlwifi: mvm: handle PS changes in vif_cfg_changed
   - mac80211: fix mesh id corruption on 32 bit systems
   - mt76: mt76x02: fix MT76x0 external LNA gain handling

 - Bluetooth: fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER

 - l2tp: fix handling of transhdrlen in __ip{,6}_append_data()

 - dsa: mv88e6xxx: avoid EEPROM timeout when EEPROM is absent

 - eth: stmmac: fix the incorrect parameter after refactoring

Previous releases - always broken:

 - net: replace calls to sock->ops->connect() with kernel_connect(),
   prevent address rewrite in kernel_bind(); otherwise BPF hooks may
   modify arguments, unexpectedly to the caller

 - tcp: fix delayed ACKs when reads and writes align with MSS

 - bpf:
   - verifier: unconditionally reset backtrack_state masks on global
     func exit
   - s390: let arch_prepare_bpf_trampoline return program size,
     fix struct_ops offsets
   - sockmap: fix accounting of available bytes in presence of PEEKs
   - sockmap: reject sk_msg egress redirects to non-TCP sockets

 - ipv4/fib: send netlink notify when delete source address routes

 - ethtool: plca: fix width of reads when parsing netlink commands

 - netfilter: nft_payload: rebuild vlan header on h_proto access

 - Bluetooth: hci_codec: fix leaking memory of local_codecs

 - eth: intel: ice: always add legacy 32byte RXDID in supported_rxdids

 - eth: stmmac:
   - dwmac-stm32: fix resume on STM32 MCU
   - remove buggy and unneeded stmmac_poll_controller, depend on NAPI

 - ibmveth: always recompute TCP pseudo-header checksum, fix use
   of the driver with Open vSwitch

 - wifi:
   - rtw88: rtw8723d: fix MAC address offset in EEPROM
   - mt76: fix lock dependency problem for wed_lock
   - mwifiex: sanity check data reported by the device
   - iwlwifi: ensure ack flag is properly cleared
   - iwlwifi: mvm: fix a memory corruption due to bad pointer arithm
   - iwlwifi: mvm: fix incorrect usage of scan API

Misc:

 - wifi: mac80211: work around Cisco AP 9115 VHT MPDU length

Signed-off-by: Jakub Kicinski <kuba@...nel.org>

----------------------------------------------------------------
Aditya Kumar Singh (1):
      wifi: cfg80211: validate AP phy operation before starting it

Alexandra Diupina (1):
      drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()

Alexei Starovoitov (1):
      Merge branch 's390-bpf-fix-arch_prepare_bpf_trampoline'

Andrii Nakryiko (1):
      bpf: unconditionally reset backtrack_state masks on global func exit

Arnd Bergmann (1):
      wifi: iwlwifi: dbg_ini: fix structure packing

Ben Greear (1):
      wifi: iwlwifi: Ensure ack flag is properly cleared.

Ben Wolsieffer (1):
      net: stmmac: dwmac-stm32: fix resume on STM32 MCU

Benjamin Berg (2):
      wifi: cfg80211: avoid leaking stack data into trace
      wifi: mac80211: Create resources for disabled links

Benjamin Poirier (1):
      ipv4: Set offload_failed flag in fibmatch results

Chengfeng Ye (1):
      tipc: fix a potential deadlock on &tx->lock

Christian Marangi (1):
      net: ethernet: mediatek: disable irq before schedule napi

Christophe JAILLET (1):
      wifi: iwlwifi: mvm: Fix a memory corruption issue

Clark Wang (1):
      net: stmmac: platform: fix the incorrect parameter

Dan Carpenter (3):
      net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns()
      net: ti: icssg-prueth: Fix signedness bug in prueth_init_tx_chns()
      dmaengine: ti: k3-udma-glue: clean up k3_udma_glue_tx_get_irq() return

Daniel Borkmann (2):
      bpf, mprog: Fix maximum program check on mprog attachment
      selftest/bpf: Add various selftests for program limits

David Howells (1):
      ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()

David S. Miller (1):
      Merge tag 'for-net-2023-09-20' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth

David Wilder (1):
      ibmveth: Remove condition to recompute TCP header checksum.

Dinghao Liu (1):
      ptp: ocp: Fix error handling in ptp_ocp_device_init

Eric Dumazet (3):
      net: fix possible store tearing in neigh_periodic_work()
      neighbour: fix data-races around n->output
      netlink: annotate data-races around sk->sk_err

Fabio Estevam (1):
      net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent

Felix Fietkau (2):
      wifi: mac80211: fix mesh id corruption on 32 bit systems
      wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling

Florian Westphal (2):
      netfilter: nft_payload: rebuild vlan header on h_proto access
      netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure

Geliang Tang (1):
      mptcp: userspace pm allow creating id 0 subflow

Gregory Greenman (1):
      iwlwifi: mvm: handle PS changes in vif_cfg_changed

Gustavo A. R. Silva (4):
      wifi: mwifiex: Fix tlv_buf_left calculation
      wifi: mwifiex: Replace one-element array with flexible-array member in struct mwifiex_ie_types_rxba_sync
      wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
      qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info

Haiyang Zhang (3):
      net: mana: Fix TX CQE error handling
      net: mana: Fix the tso_bytes calculation
      net: mana: Fix oversized sge0 for GSO packets

Hangbin Liu (1):
      ipv4/fib: send notify when delete source address routes

Hou Tao (1):
      bpf: Use kmalloc_size_roundup() to adjust size_index

Ilan Peer (2):
      wifi: cfg80211: Fix 6GHz scan configuration
      wifi: iwlwifi: mvm: Fix incorrect usage of scan API

Ilya Maximets (1):
      ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling

Jakub Kicinski (4):
      Merge tag 'for-netdev' of https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf
      Merge tag 'wireless-2023-09-27' of git://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless
      Merge tag 'nf-23-10-04' of https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
      Merge branch 'mptcp-fixes-and-maintainer-email-update-for-v6-6'

Jakub Sitnicki (1):
      bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets

Jeff Johnson (1):
      MAINTAINERS: wifi: ath12k: add wiki link

Jeremy Cline (1):
      net: nfc: llcp: Add lock when modifying device list

Johannes Berg (6):
      wifi: cfg80211: fix cqm_config access race
      wifi: cfg80211: add missing kernel-doc for cqm_rssi_work
      rfkill: sync before userspace visibility/changes
      wifi: mac80211: fix potential key use-after-free
      wifi: mac80211: fix potential key leak
      wifi: mac80211: work around Cisco AP 9115 VHT MPDU length

John Fastabend (3):
      bpf: tcp_read_skb needs to pop skb regardless of seq
      bpf, sockmap: Do not inc copied_seq when PEEK flag set
      bpf, sockmap: Add tests for MSG_F_PEEK

Jordan Rife (3):
      net: replace calls to sock->ops->connect() with kernel_connect()
      net: prevent rewrite of msg_name in sock_sendmsg()
      net: prevent address rewrite in kernel_bind()

Juerg Haefliger (1):
      wifi: brcmfmac: Replace 1-element arrays with flexible arrays

Kalle Valo (5):
      MAINTAINERS: wifi: remove generic wiki links from drivers
      MAINTAINERS: wifi: rtlwifi: remove git tree
      MAINTAINERS: wifi: rtl8xxxu: remove git tree
      MAINTAINERS: wifi: wl12xx: remove git tree
      MAINTAINERS: wifi: hostap: remove maintainer and web page

Kees Cook (1):
      sky2: Make sure there is at least one frag_addr available

Leon Hwang (1):
      bpf: Fix tr dereferencing

Lorenzo Bianconi (1):
      wifi: mt76: fix lock dependency problem for wed_lock

Luiz Augusto von Dentz (4):
      Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER
      Bluetooth: ISO: Fix handling of listen for unicast
      Bluetooth: hci_core: Fix build warnings
      Bluetooth: hci_codec: Fix leaking content of local_codecs

Matthieu Baerts (1):
      MAINTAINERS: update Matthieu's email address

Michal Schmidt (1):
      ice: always add legacy 32byte RXDID in supported_rxdids

Neal Cardwell (2):
      tcp: fix quick-ack counting to count actual ACKs of new data
      tcp: fix delayed ACKs for MSS boundary condition

Paolo Abeni (2):
      Merge branch 'net-mana-fix-some-tx-processing-bugs'
      mptcp: fix delegated action races

Parthiban Veerasooran (1):
      ethtool: plca: fix plca enable data type while parsing the value

Phil Sutter (2):
      selftests: netfilter: Extend nft_audit.sh
      netfilter: nf_tables: Deduplicate nft_register_obj audit logs

Pin-yen Lin (1):
      wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

Randy Dunlap (2):
      page_pool: fix documentation typos
      net: lan743x: also select PHYLIB

Remi Pommarel (1):
      net: stmmac: remove unneeded stmmac_poll_controller

Rocky Liao (1):
      Bluetooth: btusb: add shutdown function for QCA6174

Sascha Hauer (1):
      wifi: rtw88: rtw8723d: Fix MAC address offset in EEPROM

Shigeru Yoshida (1):
      net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

Song Liu (2):
      s390/bpf: Let arch_prepare_bpf_trampoline return program size
      selftests/bpf: Check bpf_cubic_acked() is called via struct_ops

Stefano Garzarella (1):
      vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()

Wen Gong (2):
      wifi: cfg80211/mac80211: hold link BSSes when assoc fails for MLO connection
      wifi: mac80211: allow transmitting EAPOL frames with tainted key

Xin Long (4):
      netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp
      selftests: netfilter: test for sctp collision processing in nf_conntrack
      sctp: update transport state when processing a dupcook packet
      sctp: update hb timer immediately after users change hb_interval

Yao Xiao (1):
      Bluetooth: Delete unused hci_req_prepare_suspend() declaration

Ying Hsu (2):
      Bluetooth: Fix hci_link_tx_to RCU lock usage
      Bluetooth: Avoid redundant authentication

Yoshihiro Shimoda (1):
      rswitch: Fix PHY station management clock setting

 .mailmap                                           |   1 +
 MAINTAINERS                                        |  12 +-
 arch/s390/net/bpf_jit_comp.c                       |   2 +-
 drivers/bluetooth/btusb.c                          |   1 +
 drivers/dma/ti/k3-udma-glue.c                      |   3 +
 drivers/net/dsa/mv88e6xxx/chip.c                   |   6 +-
 drivers/net/dsa/mv88e6xxx/global1.c                |  31 ---
 drivers/net/dsa/mv88e6xxx/global1.h                |   1 -
 drivers/net/dsa/mv88e6xxx/global2.c                |   2 +-
 drivers/net/dsa/mv88e6xxx/global2.h                |   1 +
 drivers/net/ethernet/ibm/ibmveth.c                 |  25 ++-
 drivers/net/ethernet/intel/ice/ice_virtchnl.c      |  12 +-
 drivers/net/ethernet/marvell/sky2.h                |   2 +-
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   4 +-
 drivers/net/ethernet/microchip/Kconfig             |   1 +
 drivers/net/ethernet/microsoft/mana/mana_en.c      | 219 ++++++++++++++-------
 drivers/net/ethernet/qlogic/qed/qed_ll2.h          |   2 +-
 drivers/net/ethernet/renesas/rswitch.c             |  13 +-
 drivers/net/ethernet/renesas/rswitch.h             |   2 +
 drivers/net/ethernet/stmicro/stmmac/dwmac-stm32.c  |   7 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  30 ---
 .../net/ethernet/stmicro/stmmac/stmmac_platform.c  |   2 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   3 +-
 drivers/net/ethernet/ti/icssg/icssg_prueth.c       |   6 +-
 drivers/net/usb/smsc75xx.c                         |   4 +-
 drivers/net/wan/fsl_ucc_hdlc.c                     |  12 +-
 .../broadcom/brcm80211/brcmfmac/fwil_types.h       |   9 +-
 drivers/net/wireless/intel/iwlwifi/fw/error-dump.h |   6 +-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |   2 +-
 .../net/wireless/intel/iwlwifi/mvm/mld-mac80211.c  | 117 +++++------
 drivers/net/wireless/intel/iwlwifi/mvm/scan.c      |   2 +-
 drivers/net/wireless/intel/iwlwifi/mvm/tx.c        |   3 +
 .../net/wireless/marvell/mwifiex/11n_rxreorder.c   |  22 ++-
 drivers/net/wireless/marvell/mwifiex/fw.h          |   2 +-
 drivers/net/wireless/marvell/mwifiex/sta_rx.c      |  16 +-
 drivers/net/wireless/mediatek/mt76/dma.c           |   8 +-
 .../net/wireless/mediatek/mt76/mt76x02_eeprom.c    |   7 -
 drivers/net/wireless/mediatek/mt76/mt76x2/eeprom.c |  13 +-
 drivers/net/wireless/realtek/rtw88/rtw8723d.h      |   1 +
 drivers/ptp/ptp_ocp.c                              |   1 -
 drivers/vhost/vringh.c                             |  12 +-
 include/linux/bpf.h                                |   2 +-
 include/linux/netfilter/nf_conntrack_sctp.h        |   1 +
 include/net/bluetooth/hci_core.h                   |   2 +-
 include/net/cfg80211.h                             |   6 +-
 include/net/ip_fib.h                               |   1 +
 include/net/mana/mana.h                            |   5 +-
 include/net/neighbour.h                            |   2 +-
 include/net/page_pool/helpers.h                    |   6 +-
 include/net/tcp.h                                  |   6 +-
 kernel/bpf/memalloc.c                              |  44 ++---
 kernel/bpf/mprog.c                                 |   3 +
 kernel/bpf/verifier.c                              |   8 +-
 net/bluetooth/hci_conn.c                           |  63 +++---
 net/bluetooth/hci_core.c                           |  14 +-
 net/bluetooth/hci_event.c                          |   1 +
 net/bluetooth/hci_request.h                        |   2 -
 net/bluetooth/hci_sync.c                           |  14 +-
 net/bluetooth/iso.c                                |   9 +-
 net/bridge/br_netfilter_hooks.c                    |   2 +-
 net/core/neighbour.c                               |  14 +-
 net/core/sock_map.c                                |   4 +
 net/ethtool/plca.c                                 |  45 +++--
 net/ipv4/fib_semantics.c                           |   1 +
 net/ipv4/fib_trie.c                                |   4 +
 net/ipv4/route.c                                   |   2 +
 net/ipv4/tcp.c                                     |  10 +-
 net/ipv4/tcp_bpf.c                                 |   4 +-
 net/ipv4/tcp_input.c                               |  13 ++
 net/ipv4/tcp_output.c                              |   7 +-
 net/ipv6/tcp_ipv6.c                                |  10 +-
 net/l2tp/l2tp_ip6.c                                |   2 +-
 net/mac80211/cfg.c                                 |   6 +-
 net/mac80211/ibss.c                                |   2 +-
 net/mac80211/ieee80211_i.h                         |   3 +-
 net/mac80211/key.c                                 |  22 ++-
 net/mac80211/mesh.c                                |   8 +-
 net/mac80211/mesh_plink.c                          |   2 +-
 net/mac80211/mlme.c                                |  45 ++++-
 net/mac80211/tx.c                                  |   3 +-
 net/mac80211/vht.c                                 |  16 +-
 net/mptcp/pm_userspace.c                           |   6 -
 net/mptcp/protocol.c                               |  28 +--
 net/mptcp/protocol.h                               |  35 ++--
 net/mptcp/subflow.c                                |  10 +-
 net/netfilter/ipvs/ip_vs_sync.c                    |   8 +-
 net/netfilter/nf_conntrack_proto_sctp.c            |  43 +++-
 net/netfilter/nf_tables_api.c                      |  44 +++--
 net/netfilter/nft_payload.c                        |  13 +-
 net/netfilter/nft_set_rbtree.c                     |  46 +++--
 net/netlink/af_netlink.c                           |   8 +-
 net/nfc/llcp_core.c                                |   2 +
 net/rds/tcp_connect.c                              |   4 +-
 net/rds/tcp_listen.c                               |   2 +-
 net/rfkill/core.c                                  |  32 ++-
 net/sctp/associola.c                               |   3 +-
 net/sctp/socket.c                                  |   1 +
 net/socket.c                                       |  36 +++-
 net/tipc/crypto.c                                  |   4 +-
 net/wireless/core.c                                |  14 +-
 net/wireless/core.h                                |   7 +-
 net/wireless/mlme.c                                |   3 +-
 net/wireless/nl80211.c                             | 116 +++++++----
 net/wireless/scan.c                                |   4 +
 .../testing/selftests/bpf/prog_tests/bpf_tcp_ca.c  |   2 +
 .../selftests/bpf/prog_tests/sockmap_basic.c       |  51 +++++
 tools/testing/selftests/bpf/prog_tests/tc_opts.c   |  84 ++++++++
 tools/testing/selftests/bpf/progs/bpf_cubic.c      |   3 +
 tools/testing/selftests/netfilter/Makefile         |   5 +-
 .../netfilter/conntrack_sctp_collision.sh          |  89 +++++++++
 tools/testing/selftests/netfilter/nft_audit.sh     | 117 +++++++++--
 tools/testing/selftests/netfilter/sctp_collision.c |  99 ++++++++++
 112 files changed, 1358 insertions(+), 600 deletions(-)
 create mode 100755 tools/testing/selftests/netfilter/conntrack_sctp_collision.sh
 create mode 100644 tools/testing/selftests/netfilter/sctp_collision.c

Powered by blists - more mailing lists