Budimir Markovic 3c0bd0b797 net/sched: sch_hfsc: Ensure inner classes have fsc curve ... commit b3d26c5702 upstream. HFSC assumes that inner classes have an fsc curve, but it is currently possible for classes without an fsc curve to become parents. This leads to bugs including a use-after-free. Don't allow non-root classes without HFSC_FSC to become parents. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Reported-by: Budimir Markovic <markovicbudimir@gmail.com> Signed-off-by: Budimir Markovic <markovicbudimir@gmail.com> Acked-by: Jamal Hadi Salim <jhs@mojatatu.com> Link: https://lore.kernel.org/r/20230824084905.422-1-markovicbudimir@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> [ v4.14: Delete NL_SET_ERR_MSG because extack is not added to hfsc_change_class ] Signed-off-by: Shaoying Xu <shaoyi@amazon.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-10-10 21:43:40 +02:00
..
6lowpan
9p	9p: virtio: make sure 'offs' is initialized in zc_request	2023-09-23 10:46:52 +02:00
802	mrp: introduce active flags to prevent UAF when applicant uninit	2023-01-18 09:26:32 +01:00
8021q	vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()	2023-05-30 12:38:36 +01:00
appletalk	appletalk: Fix skb allocation size in loopback case	2021-04-07 12:47:02 +02:00
atm	atm: hide unused procfs functions	2023-06-09 10:22:52 +02:00
ax25	ax25: Fix UAF bugs in ax25 timers	2022-04-27 13:15:32 +02:00
batman-adv	batman-adv: Fix batadv_v_ogm_aggr_send memory leak	2023-08-30 16:35:15 +02:00
bluetooth	Bluetooth: L2CAP: Fix use-after-free	2023-08-30 16:35:11 +02:00
bpf	bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()	2022-11-25 17:36:54 +01:00
bridge	net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode	2023-08-11 11:33:40 +02:00
caif	net: caif: Fix use-after-free in cfusbl_device_notify()	2023-03-17 08:30:37 +01:00
can	can: bcm: Fix UAF in bcm_proc_show()	2023-08-11 11:33:47 +02:00
ceph	libceph: fix potential hang in ceph_osdc_notify()	2023-08-11 11:33:56 +02:00
core	af_unix: Fix data race around sk->sk_err.	2023-09-23 10:47:02 +02:00
dcb	net: dcb: disable softirqs in dcbnl_flush_dev()	2022-03-08 19:01:58 +01:00
dccp	dccp: fix dccp_v4_err()/dccp_v6_err() again	2023-10-10 21:43:38 +02:00
decnet	Remove DECnet support from kernel	2023-06-21 15:38:58 +02:00
dns_resolver
dsa
ethernet
hsr	net: hsr: Fix potential use-after-free	2022-12-08 11:16:32 +01:00
ieee802154	net: ieee802154: fix error return code in dgram_bind()	2022-11-03 23:50:54 +09:00
ife
ipv4	ipv4: fix null-deref in ipv4_link_failure	2023-10-10 21:43:38 +02:00
ipv6	net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr	2023-09-23 10:47:02 +02:00
ipx
iucv	net/iucv: Fix size of interrupt data	2023-03-22 13:26:15 +01:00
kcm	kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().	2023-09-23 10:47:03 +02:00
key	net: af_key: fix sadb_x_filter validation	2023-08-30 16:35:11 +02:00
l2tp	inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().	2023-04-26 11:18:57 +02:00
l3mdev
lapb	net: lapb: Copy the skb before sending a packet	2021-02-10 09:12:08 +01:00
llc	llc: Don't drop packet from non-root netns.	2023-08-11 11:33:49 +02:00
mac80211	wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta	2023-04-20 12:02:10 +02:00
mac802154	mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()	2022-12-14 11:26:14 +01:00
mpls	net: mpls: fix stale pointer if allocation fails during device rename	2023-02-22 12:46:06 +01:00
ncsi	net/ncsi: Avoid GFP_KERNEL in response handler	2021-04-16 11:57:51 +02:00
netfilter	netfilter: xt_sctp: validate the flag_info count	2023-09-23 10:46:59 +02:00
netlabel	netlabel: fix shift wrapping bug in netlbl_catmap_setlong()	2023-09-23 10:46:53 +02:00
netlink	netlink: Add __sock_i_ino() for __netlink_diag_dump().	2023-08-11 11:33:35 +02:00
netrom	netrom: Deny concurrent connect().	2023-09-23 10:46:55 +02:00
nfc	nfc: change order inside nfc_se_io error path	2023-03-17 08:30:37 +01:00
nsh	net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()	2023-05-30 12:38:36 +01:00
openvswitch	net: openvswitch: fix flow memory leak in ovs_flow_cmd_new	2023-02-22 12:46:01 +01:00
packet	net/packet: annotate data-races around tp->status	2023-08-16 18:10:54 +02:00
phonet	phonet: refcount leak in pep_sock_accep	2022-01-11 13:57:37 +01:00
psample
qrtr	net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()	2021-03-30 14:40:12 +02:00
rds	net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()	2022-10-26 13:17:00 +02:00
rfkill
rose	net/rose: Fix to not accept on connected socket	2023-02-22 12:46:05 +01:00
rxrpc	rxrpc: Don't try to resend the request if we're receiving the reply	2022-06-14 16:53:50 +02:00
sched	net/sched: sch_hfsc: Ensure inner classes have fsc curve	2023-10-10 21:43:40 +02:00
sctp	sctp: handle invalid error codes without calling BUG()	2023-09-23 10:46:54 +02:00
smc	net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending	2022-05-18 09:18:06 +02:00
strparser
sunrpc	SUNRPC: Fix UAF in svc_tcp_listen_data_ready()	2023-08-11 11:33:44 +02:00
switchdev
tipc	net: tipc: resize nlattr array to correct size	2023-06-21 15:38:59 +02:00
tls
unix	af_unix: Fix data-race around unix_tot_inflight.	2023-09-23 10:47:02 +02:00
vmw_vsock	vsock: avoid to close connected socket after the timeout	2023-05-30 12:38:36 +01:00
wimax
wireless	wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()	2023-08-11 11:33:48 +02:00
x25	net/x25: Fix to not accept on connected socket	2023-02-22 12:46:02 +01:00
xfrm	net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure	2023-08-30 16:35:14 +02:00
compat.c	net: Return the correct errno code	2021-06-30 08:48:47 -04:00
Kconfig	Remove DECnet support from kernel	2023-06-21 15:38:58 +02:00
Makefile	Remove DECnet support from kernel	2023-06-21 15:38:58 +02:00
socket.c	net: annotate sk->sk_err write from do_recvmmsg()	2023-05-30 12:38:34 +01:00
sysctl_net.c