Trond Myklebust e6914e1af4 nfsd: Fix an Oops in free_session() ...

commit bb6ad5572c upstream.

In call_xpt_users(), we delete the entry from the list, but we
do not reinitialise it. This triggers the list poisoning when
we later call unregister_xpt_user() in nfsd4_del_conns().

Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
Cc: stable@vger.kernel.org
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-11-21 09:27:36 +01:00

..

6lowpan

6lowpan: iphc: reset mac_header after decompress to fix panic

2018-10-10 08:52:04 +02:00

9p

net/9p: fix error path of p9_virtio_probe

2018-09-15 09:40:39 +02:00

802

…

8021q

…

appletalk

…

atm

…

ax25

…

batman-adv

…

bluetooth

Bluetooth: SMP: fix crash in unpairing

2018-11-10 07:41:33 -08:00

bridge

net: bridge: remove ipv6 zero address check in mcast queries

2018-11-10 07:41:41 -08:00

caif

net: caif: Add a missing rcu_read_unlock() in caif_flow_cb

2018-09-05 09:18:34 +02:00

can

…

ceph

…

core

rtnetlink: Disallow FDB configuration for non-Ethernet device

2018-11-10 07:41:42 -08:00

dcb

net: dcb: For wild-card lookups, use priority -1, not 0

2018-09-19 22:48:58 +02:00

dccp

dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart()

2018-08-22 07:48:35 +02:00

decnet

…

dns_resolver

…

dsa

net: dsa: Do not suspend/resume closed slave_dev

2018-08-06 16:24:41 +02:00

ethernet

…

hsr

…

ieee802154

net: 6lowpan: fix reserved space for single frames

2018-09-09 20:04:32 +02:00

ipv4

net/ipv4: defensive cipso option parsing

2018-11-21 09:27:34 +01:00

ipv6

net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs

2018-11-10 07:41:41 -08:00

ipx

…

irda

irda: Only insert new objects into the global database via setsockopt

2018-09-15 09:40:40 +02:00

iucv

af_iucv: Move sockaddr length checks to before accessing sa_family in bind and connect handlers

2018-11-10 07:41:35 -08:00

key

…

l2tp

l2tp: hold tunnel socket when handling control frames in l2tp_ip and l2tp_ip6

2018-11-10 07:41:43 -08:00

l3mdev

…

lapb

…

llc

llc: use refcount_inc_not_zero() for llc_sap_find()

2018-08-22 07:48:35 +02:00

mac80211

mac80211: Always report TX status

2018-11-10 07:41:33 -08:00

mac802154

net: mac802154: tx: expand tailroom if necessary

2018-09-09 20:04:32 +02:00

mpls

…

netfilter

netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user

2018-09-19 22:48:59 +02:00

netlabel

netlabel: check for IPV4MASK in addrinfo_get

2018-10-20 09:52:36 +02:00

netlink

netlink: Don't shift on 64 for ngroups

2018-08-09 12:19:28 +02:00

netrom

…

nfc

NFC: Fix possible memory corruption when handling SHDLC I-Frame commands

2018-09-29 03:08:51 -07:00

openvswitch

…

packet

packet: refine ring v3 block size test to hold one frame

2018-08-24 13:27:01 +02:00

phonet

…

rds

…

rfkill

…

rose

…

rxrpc

…

sched

net: sched: gred: pass the right attribute to gred_change_table_def()

2018-11-10 07:41:41 -08:00

sctp

sctp: fix race on sctp_id2asoc

2018-11-10 07:41:42 -08:00

sunrpc

nfsd: Fix an Oops in free_session()

2018-11-21 09:27:36 +01:00

switchdev

…

tipc

…

unix

net: drop write-only stack variable

2018-11-10 07:41:34 -08:00

vmw_vsock

vsock: split dwork to avoid reinitializations

2018-08-22 07:48:35 +02:00

wimax

…

wireless

cfg80211: reg: Init wiphy_idx in regulatory_hint_core()

2018-11-10 07:41:33 -08:00

x25

…

xfrm

xfrm: Clear sk_dst_cache when applying per-socket policy.

2018-11-10 07:41:37 -08:00

compat.c

…

Kconfig

…

Makefile

…

socket.c

net: socket: fix a missing-check bug

2018-11-10 07:41:41 -08:00

sysctl_net.c

…