Dan Carpenter 1787b9f072 hsr: Prevent use after free in prp_create_tagged_frame() ... [ Upstream commit 876f8ab523 ] The prp_fill_rct() function can fail. In that situation, it frees the skb and returns NULL. Meanwhile on the success path, it returns the original skb. So it's straight forward to fix bug by using the returned value. Fixes: 451d8123f8 ("net: prp: add packet handling support") Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org> Acked-by: Paolo Abeni <pabeni@redhat.com> Link: https://lore.kernel.org/r/57af1f28-7f57-4a96-bcd3-b7a0f2340845@moroto.mountain Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-11-20 11:57:22 +01:00
..
6lowpan
9p	9p/net: fix possible memory leak in p9_check_errors()	2023-11-20 11:57:17 +01:00
802
8021q	Revert "vlan: Fix VLAN 0 memory leak"	2023-08-14 08:14:00 +01:00
appletalk	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
atm	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
ax25	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
batman-adv	batman-adv: Hold rtnl lock during MTU update via netlink	2023-08-22 17:25:10 -07:00
bluetooth	Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err	2023-11-20 11:56:53 +01:00
bpf	bpf: Move kernel test kfuncs to bpf_testmod	2023-05-16 22:09:24 -07:00
bpfilter	net: Use umd_cleanup_helper()	2023-05-31 13:06:57 +02:00
bridge	neighbour: fix data-races around n->output	2023-10-10 22:03:01 +02:00
caif	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
can	can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior	2023-10-19 23:10:59 +02:00
ceph	libceph: use kernel_connect()	2023-10-19 23:11:05 +02:00
core	net: skb_find_text: Ignore patterns extending past 'to'	2023-11-20 11:56:51 +01:00
dcb	net: dcb: choose correct policy to parse DCB_ATTR_BCN	2023-08-01 21:07:46 -07:00
dccp	dccp: fix dccp_v4_err()/dccp_v6_err() again	2023-10-06 13:15:54 +02:00
devlink	devlink: Hold devlink lock on health reporter dump get	2023-10-19 23:10:59 +02:00
dns_resolver
dsa	net: dsa: fix older DSA drivers using phylink	2023-07-27 17:19:46 -07:00
ethernet
ethtool	ethtool: plca: fix plca enable data type while parsing the value	2023-10-10 22:03:02 +02:00
handshake	net/handshake: fix file ref count in handshake_nl_accept_doit()	2023-11-02 09:36:54 +01:00
hsr	hsr: Prevent use after free in prp_create_tagged_frame()	2023-11-20 11:57:22 +01:00
ieee802154	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
ife
ipv4	tcp: fix cookie_init_timestamp() overflows	2023-11-20 11:56:52 +01:00
ipv6	ipv6: avoid atomic fragment on GSO packets	2023-11-20 11:56:54 +01:00
iucv
kcm	kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().	2023-09-19 12:30:30 +02:00
key	net: af_key: fix sadb_x_filter validation	2023-06-29 10:47:29 +02:00
l2tp	udp: annotate data-races around udp->encap_type	2023-11-20 11:56:47 +01:00
l3mdev
lapb
llc	llc: verify mac len before reading mac header	2023-11-20 11:57:21 +01:00
mac80211	wifi: mac80211: Fix setting vif links	2023-11-20 11:56:52 +01:00
mac802154	Core WPAN changes:	2023-06-24 15:41:46 -07:00
mctp	mctp: perform route lookups under a RCU read-side lock	2023-10-19 23:11:06 +02:00
mpls	net: move gso declarations and functions to their own files	2023-06-10 00:11:41 -07:00
mptcp	mptcp: properly account fastopen data	2023-11-20 11:56:54 +01:00
ncsi	ncsi: Propagate carrier gain/loss events to the NCSI controller	2023-10-06 13:16:17 +02:00
netfilter	netfilter: nf_tables: Drop pointless memset when dumping rules	2023-11-20 11:56:51 +01:00
netlabel	netlabel: Reorder fields in 'struct netlbl_domaddr6_map'	2023-06-20 20:06:56 -07:00
netlink	netlink: annotate data-races around sk->sk_err	2023-10-10 22:03:03 +02:00
netrom	netrom: Deny concurrent connect().	2023-09-13 09:53:12 +02:00
nfc	nfc: nci: fix possible NULL pointer dereference in send_acknowledge()	2023-10-25 12:16:10 +02:00
nsh	net: move gso declarations and functions to their own files	2023-06-10 00:11:41 -07:00
openvswitch	net: openvswitch: reject negative ifindex	2023-08-15 19:07:52 -07:00
packet	af_packet: Fix fortified memcpy() without flex array.	2023-10-19 23:11:01 +02:00
phonet	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
psample
qrtr	Networking changes for 6.5.	2023-06-28 16:43:10 -07:00
rds	net: prevent address rewrite in kernel_bind()	2023-10-19 23:10:56 +02:00
rfkill	net: rfkill: reduce data->mtx scope in rfkill_fop_open	2023-10-25 12:16:30 +02:00
rose	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
rxrpc	Networking changes for 6.5.	2023-06-28 16:43:10 -07:00
sched	net: sched: cls_u32: Fix allocation size in u32_init()	2023-11-08 14:08:56 +01:00
sctp	sctp: update hb timer immediately after users change hb_interval	2023-10-10 22:03:03 +02:00
smc	net/smc: return the right falback reason when prefix checks fail	2023-10-25 12:16:10 +02:00
strparser
sunrpc	SUNRPC/TLS: Lock the lower_xprt during the tls handshake	2023-10-25 12:16:18 +02:00
switchdev
tipc	tipc: Use size_add() in calls to struct_size()	2023-11-20 11:56:48 +01:00
tls	tls: Use size_add() in call to struct_size()	2023-11-20 11:56:48 +01:00
unix	af_unix: Fix data-race around unix_tot_inflight.	2023-09-19 12:30:18 +02:00
vmw_vsock	vsock/virtio: initialize the_virtio_vsock before using VQs	2023-11-02 09:36:46 +01:00
wireless	wifi: cfg80211: fix off-by-one in element defrag	2023-11-20 11:56:46 +01:00
x25	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
xdp	xdp: Fix zero-size allocation warning in xskq_create()	2023-10-19 23:11:00 +02:00
xfrm	net: xfrm: skip policies marked as dead while reinserting policies	2023-10-25 12:16:13 +02:00
compat.c
devres.c
Kconfig	net/core: Enable socket busy polling on -RT	2023-05-26 08:51:26 +01:00
Kconfig.debug
Makefile
socket.c	net: prevent address rewrite in kernel_bind()	2023-10-19 23:10:56 +02:00
sysctl_net.c