Kuniyuki Iwashima f6adf7a180 smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). ...

[ Upstream commit 0b0e4d51c6 ]

smc_vlan_by_tcpsk() fetches sk_dst_get(sk)->dev before RTNL and
passes it to netdev_walk_all_lower_dev(), which is illegal.

Also, smc_vlan_by_tcpsk_walk() does not require RTNL at all.

Let's use __sk_dst_get(), dst_dev_rcu(), and
netdev_walk_all_lower_dev_rcu().

Note that the returned value of smc_vlan_by_tcpsk() is not used
in the caller.

Fixes: 0cfdd8f92c ("smc: connection and link group creation")
Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20250916214758.650211-5-kuniyu@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-10-15 12:04:00 +02:00

..

af_smc.c

net/smc: fix UAF on smcsk after smc_listen_out()

2025-08-19 18:27:16 -07:00

Kconfig

net/smc: introduce loopback-ism for SMC intra-OS shortcut

2024-04-30 13:24:48 +02:00

Makefile

net/smc: Introduce IPPROTO_SMC

2024-06-17 13:14:09 +01:00

smc_cdc.c

net/smc: adapt cursor update when sndbuf and peer DMB are merged

2024-04-30 13:24:48 +02:00

smc_cdc.h

net/smc: fix kernel panic caused by race of smc_sock

2021-12-28 12:42:45 +00:00

smc_clc.c

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

2025-10-15 12:04:00 +02:00

smc_clc.h

net/smc: check smcd_v2_ext_offset when receiving proposal msg

2024-12-15 12:34:59 +00:00

smc_close.c

net/smc: put sk reference if close work was canceled

2023-11-06 10:01:07 +00:00

smc_close.h

…

smc_core.c

smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk().

2025-10-15 12:04:00 +02:00

smc_core.h

net/smc: support SMC-R V2 for rdma devices with max_recv_sge equals to 1

2024-12-12 13:50:00 +01:00

smc_diag.c

net: remove sock_i_uid()

2025-06-23 17:04:03 -07:00

smc_ib.c

net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

2025-09-02 10:51:16 +02:00

smc_ib.h

net/smc: fix smc clc failed issue when netdevice not in init_net

2023-10-13 16:52:02 -07:00

smc_inet.c

net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC

2024-10-10 08:48:11 -07:00

smc_inet.h

net/smc: Introduce IPPROTO_SMC

2024-06-17 13:14:09 +01:00

smc_ism.c

net/smc: add operations to merge sndbuf with peer DMB

2024-04-30 13:24:48 +02:00

smc_ism.h

net/smc: add operations to merge sndbuf with peer DMB

2024-04-30 13:24:48 +02:00

smc_llc.c

net/smc: support SMC-R V2 for rdma devices with max_recv_sge equals to 1

2024-12-12 13:50:00 +01:00

smc_llc.h

net/smc: Introduce a specific sysctl for TEST_LINK time

2022-09-22 12:58:21 +02:00

smc_loopback.c

net/smc: fix warning in smc_rx_splice() when calling get_page()

2025-09-19 16:44:05 -07:00

smc_loopback.h

net/smc: remove unreferenced header in smc_loopback.h file

2024-07-31 11:48:58 +01:00

smc_netlink.c

genetlink: start to validate reserved header bytes

2022-08-29 12:47:15 +01:00

smc_netlink.h

…

smc_netns.h

…

smc_pnet.c

smc: Fix use-after-free in __pnet_find_base_ndev().

2025-10-15 12:04:00 +02:00

smc_pnet.h

net/smc: Use a mutex for locking "struct smc_pnettable"

2022-02-24 09:09:33 -08:00

smc_rx.c

net/smc: fix data error when recvmsg with MSG_PEEK flag

2025-01-13 18:59:00 -08:00

smc_rx.h

net/smc: fix data error when recvmsg with MSG_PEEK flag

2025-01-13 18:59:00 -08:00

smc_stats.c

net/smc: introduce statistics for ringbufs usage of net namespace

2024-08-20 11:38:23 +02:00

smc_stats.h

net/smc: introduce statistics for ringbufs usage of net namespace

2024-08-20 11:38:23 +02:00

smc_sysctl.c

net/smc: add sysctl for smc_limit_hs

2024-09-10 12:11:04 +02:00

smc_sysctl.h

net/smc: add sysctl for max conns per lgr for SMC-R v2.1

2023-11-24 12:13:14 +00:00

smc_tracepoint.c

…

smc_tracepoint.h

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

smc_tx.c

net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty

2023-11-24 15:00:47 +00:00

smc_tx.h

smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES

2023-06-24 15:50:12 -07:00

smc_wr.c

net/smc: support SMC-R V2 for rdma devices with max_recv_sge equals to 1

2024-12-12 13:50:00 +01:00

smc_wr.h

net/smc: Use percpu ref for wr tx reference

2023-03-17 08:59:01 +00:00

smc.h

smc: Fix various oops due to inet_sock type confusion.

2025-07-14 17:12:42 -07:00