linux-stable/net
Jakub Kicinski b07caa540b net: limit altnames to 64k total
[ Upstream commit 155fb43b70 ]

Property list (altname is a link "property") is wrapped
in a nlattr. nlattrs length is 16bit so practically
speaking the list of properties can't be longer than
that, otherwise user space would have to interpret
broken netlink messages.

Prevent the problem from occurring by checking the length
of the property list before adding new entries.

Reported-by: George Shuklin <george.shuklin@gmail.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-13 19:27:21 +02:00
..
6lowpan
9p xen/9p: use alloc/free_pages_exact() 2022-03-07 09:48:55 +01:00
802
8021q
appletalk
atm
ax25 ax25: fix UAF bug in ax25_send_control() 2022-04-08 13:58:59 +02:00
batman-adv ipv6: make mc_forwarding atomic 2022-04-13 19:27:12 +02:00
bluetooth Bluetooth: use memset avoid memory leaks 2022-04-13 19:27:19 +02:00
bpf
bpfilter
bridge net: bridge: multicast: notify switchdev driver whenever MC processing gets disabled 2022-02-16 20:35:00 -08:00
caif
can can: isotp: set default value for N_As to 50 micro seconds 2022-04-13 19:27:20 +02:00
ceph
core net: limit altnames to 64k total 2022-04-13 19:27:21 +02:00
dcb net: dcb: disable softirqs in dcbnl_flush_dev() 2022-03-03 08:01:55 -08:00
dccp
decnet
dns_resolver
dsa net: dsa: fix panic on shutdown if multi-chip tree failed to probe 2022-04-08 13:58:22 +02:00
ethernet
ethtool
hsr
ieee802154
ife
ipv4 ipv4: Invalidate neighbour for broadcast address upon address addition 2022-04-13 19:27:16 +02:00
ipv6 ipv6: annotate some data-races around sk->sk_prot 2022-04-13 19:27:16 +02:00
iucv
kcm
key af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register 2022-03-10 07:39:47 +01:00
l2tp
l3mdev
lapb
llc llc: only change llc->dev when bind() succeeds 2022-03-28 10:03:22 +02:00
mac80211 mac80211: limit bandwidth in HE capabilities 2022-04-08 13:58:03 +02:00
mac802154
mctp mctp: make __mctp_dev_get() take a refcount hold 2022-04-13 19:27:18 +02:00
mpls
mptcp mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb 2022-04-08 13:58:21 +02:00
ncsi
netfilter netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options 2022-04-08 13:58:31 +02:00
netlabel
netlink af_netlink: Fix shift out of bounds in group mask calculation 2022-04-08 13:58:21 +02:00
netrom
nfc
nsh
openvswitch openvswitch: Fixed nd target mask field in the flow dump. 2022-04-08 13:59:03 +02:00
packet net/packet: fix slab-out-of-bounds access in packet_recvmsg() 2022-03-14 22:08:34 -07:00
phonet
psample
qrtr
rds
rfkill rfkill: make new event layout opt-in 2022-04-08 13:57:27 +02:00
rose
rxrpc rxrpc: Fix call timer start racing with call destruction 2022-04-08 13:58:55 +02:00
sched net/sched: act_ct: fix ref leak when switching zones 2022-04-08 13:58:35 +02:00
sctp security: add sctp_assoc_established hook 2022-04-08 13:57:34 +02:00
smc net/smc: correct settings of RMB window update limit 2022-04-13 19:27:19 +02:00
strparser
sunrpc SUNRPC don't resend a task on an offlined transport 2022-04-08 13:58:31 +02:00
switchdev
tipc tipc: fix the timer expires after interval 100ms 2022-04-08 13:58:22 +02:00
tls
unix af_unix: Support POLLPRI for OOB. 2022-04-08 13:59:00 +02:00
vmw_vsock vsock/virtio: enable VQs early on probe 2022-04-08 13:58:32 +02:00
wireless cfg80211: don't add non transmitted BSS to 6GHz scanned channels 2022-04-13 19:27:11 +02:00
x25 net/x25: Fix null-ptr-deref caused by x25_disconnect 2022-04-08 13:58:34 +02:00
xdp xsk: Do not write NULL in SW ring at allocation failure 2022-04-08 13:59:03 +02:00
xfrm Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0" 2022-03-06 08:38:28 +01:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile
socket.c net: fix documentation for kernel_getsockname 2022-02-14 14:01:19 +00:00
sysctl_net.c