netdev - [PATCH 0/7] pull request (net): ipsec 2023-10-17

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 17 Oct 2023 10:37:16 +0200
From: Steffen Klassert <steffen.klassert@...unet.com>
To: David Miller <davem@...emloft.net>, Jakub Kicinski <kuba@...nel.org>
CC: Herbert Xu <herbert@...dor.apana.org.au>, Steffen Klassert
	<steffen.klassert@...unet.com>, <netdev@...r.kernel.org>
Subject: [PATCH 0/7] pull request (net): ipsec 2023-10-17

1) Fix a slab-use-after-free in xfrm_policy_inexact_list_reinsert.
   From Dong Chenchen.

2) Fix data-races in the xfrm interfaces dev->stats fields.
   From Eric Dumazet.

3) Fix a data-race in xfrm_gen_index.
   From Eric Dumazet.

4) Fix an inet6_dev refcount underflow.
   From Zhang Changzhong.

5) Check the return value of pskb_trim in esp_remove_trailer
   for esp4 and esp6. From Ma Ke.

6) Fix a data-race in xfrm_lookup_with_ifid.
   From Eric Dumazet.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit d3287e4038ca4f81e02067ab72d087af7224c68b:

  Revert "net: macsec: preserve ingress frame ordering" (2023-09-05 10:56:55 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git tags/ipsec-2023-10-17

for you to fetch changes up to de5724ca38fd5e442bae9c1fab31942b6544012d:

  xfrm: fix a data-race in xfrm_lookup_with_ifid() (2023-10-13 07:57:27 +0200)

----------------------------------------------------------------
ipsec-2023-10-17

----------------------------------------------------------------
Dong Chenchen (1):
      net: xfrm: skip policies marked as dead while reinserting policies

Eric Dumazet (3):
      xfrm: interface: use DEV_STATS_INC()
      xfrm: fix a data-race in xfrm_gen_index()
      xfrm: fix a data-race in xfrm_lookup_with_ifid()

Ma Ke (2):
      net: ipv6: fix return value check in esp_remove_trailer
      net: ipv4: fix return value check in esp_remove_trailer

Zhang Changzhong (1):
      xfrm6: fix inet6_dev refcount underflow problem

 include/net/netns/xfrm.h       |  1 +
 net/ipv4/esp4.c                |  4 +++-
 net/ipv6/esp6.c                |  4 +++-
 net/ipv6/xfrm6_policy.c        |  4 ++--
 net/xfrm/xfrm_interface_core.c | 22 ++++++++++------------
 net/xfrm/xfrm_policy.c         | 27 ++++++++++++++++-----------
 6 files changed, 35 insertions(+), 27 deletions(-)