Florian Westphal 4d05239203 netfilter: nf_queue: fix possible use-after-free ...

commit c387307024 upstream.

Eric Dumazet says:
  The sock_hold() side seems suspect, because there is no guarantee
  that sk_refcnt is not already 0.

On failure, we cannot queue the packet and need to indicate an
error.  The packet will be dropped by the caller.

v2: split skb prefetch hunk into separate change

Fixes: 271b72c7fa ("udp: RCU handling for Unicast packets.")
Reported-by: Eric Dumazet <eric.dumazet@gmail.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-03-08 19:09:33 +01:00

..

ipv4

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

ipv6

netfilter: remove nf_conntrack_icmpv6.h header.

2019-09-13 12:33:06 +02:00

br_netfilter.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_acct.h

netfilter: conntrack: add nf_ct_acct_add()

2020-03-30 02:05:39 +02:00

nf_conntrack_bridge.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_core.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_count.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_conntrack_ecache.h

netfilter: conntrack: use consistent style when defining inline functions

2019-09-13 12:46:25 +02:00

nf_conntrack_expect.h

netfilter: fix coding-style errors.

2019-09-13 11:39:38 +02:00

nf_conntrack_extend.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_helper.h

treewide: Use sizeof_field() macro

2019-12-09 10:36:44 -08:00

nf_conntrack_l4proto.h

netfilter: ctnetlink: add kernel side filtering for dump

2020-05-27 22:20:34 +02:00

nf_conntrack_labels.h

netfilter: fix include guards.

2019-09-13 11:39:38 +02:00

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

netfilter: conntrack: wrap two inline functions in config checks.

2019-09-13 12:47:10 +02:00

nf_conntrack_timeout.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_timestamp.h

netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h.

2019-09-13 12:48:09 +02:00

nf_conntrack_tuple.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_conntrack_zones.h

netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h.

2019-09-13 12:47:41 +02:00

nf_conntrack.h

netfilter: conntrack: annotate data-races around ct->timeout

2021-12-14 11:32:37 +01:00

nf_dup_netdev.h

netfilter: nft_{fwd,dup}_netdev: add offload support

2019-09-10 22:44:29 +02:00

nf_flow_table.h

netfilter: flowtable: Remove redundant hw refresh bit

2021-06-03 09:00:37 +02:00

nf_log.h

netfilter: nf_log: missing vlan offload tag and proto

2020-10-14 01:25:14 +02:00

nf_nat_helper.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_nat_masquerade.h

netfilter: update include directives.

2019-09-13 12:33:06 +02:00

nf_nat_redirect.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_nat.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_queue.h

netfilter: nf_queue: fix possible use-after-free

2022-03-08 19:09:33 +01:00

nf_reject.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nf_socket.h

netfilter: Decrease code duplication regarding transparent socket option

2018-06-03 00:02:01 +02:00

nf_synproxy.h

netfilter: remove CONFIG_NETFILTER checks from headers.

2019-09-13 12:47:36 +02:00

nf_tables_core.h

netfilter: nf_tables: Implement fast bitwise expression

2020-10-04 21:08:33 +02:00

nf_tables_ipv4.h

netfilter: nf_tables: add inet ingress support

2020-10-12 01:57:34 +02:00

nf_tables_ipv6.h

netfilter: nf_tables: add inet ingress support

2020-10-12 01:57:34 +02:00

nf_tables_offload.h

netfilter: nf_tables_offload: incorrect flow offload action array size

2022-03-02 11:42:47 +01:00

nf_tables.h

netfilter: nf_tables_offload: incorrect flow offload action array size

2022-03-02 11:42:47 +01:00

nf_tproxy.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

2018-07-20 22:28:28 -07:00

nft_fib.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nft_meta.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

nft_reject.h

netfilter: add missing includes to a number of header-files.

2019-08-13 12:14:39 +02:00

xt_rateest.h

…