Eric Dumazet 7eadfacd2b ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero ...

[ Upstream commit 65a3c497c0 ]

Before taking a refcount, make sure the object is not already
scheduled for deletion.

Same fix is needed in ipv6_flowlabel_opt()

Fixes: 18367681a1 ("ipv6 flowlabel: Convert np->ipv6_fl_list to RCU.")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-06-22 08:15:13 +02:00

..

ila

ila: Fix rhashtable walker list corruption

2019-04-03 06:26:18 +02:00

netfilter

netfilter: ip6t_srh: fix NULL pointer dereferences

2019-05-04 09:20:12 +02:00

addrconf_core.c

…

addrconf.c

net: fix IPv6 prefix route residue

2019-02-23 09:07:24 +01:00

addrlabel.c

…

af_inet6.c

ipv6: Consider sk_bound_dev_if when binding a socket to an address

2019-02-06 17:30:06 +01:00

ah6.c

…

anycast.c

…

calipso.c

…

datagram.c

ip: on queued skb use skb_header_pointer instead of pskb_may_pull

2019-01-22 21:40:31 +01:00

esp6_offload.c

…

esp6.c

esp: Skip TX bytes accounting when sending from a request socket

2019-03-23 20:09:48 +01:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

…

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

…

icmp.c

ipv6: make icmp6_send() robust against null skb->dev

2019-01-22 21:40:35 +01:00

inet6_connection_sock.c

…

inet6_hashtables.c

…

ip6_checksum.c

…

ip6_fib.c

ipv6: prevent possible fib6 leaks

2019-05-25 18:23:18 +02:00

ip6_flowlabel.c

ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero

2019-06-22 08:15:13 +02:00

ip6_gre.c

net: ip6_gre: fix possible NULL pointer dereference in ip6erspan_set_version

2019-04-20 09:16:03 +02:00

ip6_icmp.c

…

ip6_input.c

net: use skb_list_del_init() to remove from RX sublists

2018-12-17 09:24:27 +01:00

ip6_offload.c

…

ip6_offload.h

…

ip6_output.c

ipv6: Fix dangling pointer when ipv6 fragment

2019-04-17 08:38:40 +02:00

ip6_tunnel.c

ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type

2019-04-17 08:38:40 +02:00

ip6_udp_tunnel.c

ipv6: explicitly initialize udp6_addr in udp_sock_create6()

2019-01-09 17:38:31 +01:00

ip6_vti.c

ip: validate header length on virtual device xmit

2019-01-09 17:38:31 +01:00

ip6mr.c

ip6mr: Do not call __IP6_INC_STATS() from preemptible context

2019-03-10 07:17:16 +01:00

ipcomp6.c

…

ipv6_sockglue.c

…

Kconfig

…

Makefile

…

mcast_snoop.c

…

mcast.c

…

mip6.c

…

ndisc.c

…

netfilter.c

netfilter: ipv6: Don't preserve original oif for loopback address

2019-02-27 10:09:03 +01:00

output_core.c

inet: switch IP ID generator to siphash

2019-06-04 08:02:30 +02:00

ping.c

…

proc.c

…

protocol.c

…

raw.c

ipv6: fix EFAULT on sendto with icmpv6 and hdrincl

2019-06-11 12:20:50 +02:00

reassembly.c

net: IP6 defrag: use rbtrees for IPv6 defrag

2019-04-27 09:36:33 +02:00

route.c

ipv6: Fix redirect with VRF

2019-06-04 08:02:31 +02:00

seg6_hmac.c

…

seg6_iptunnel.c

ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation

2019-02-06 17:30:06 +01:00

seg6_local.c

…

seg6.c

ipv6: propagate genlmsg_reply return code

2019-02-27 10:08:58 +01:00

sit.c

vrf: sit mtu should not be updated when vrf netdev is the link

2019-05-16 19:41:30 +02:00

syncookies.c

…

sysctl_net_ipv6.c

…

tcp_ipv6.c

tcp: do not use ipv6 header for ipv4 flow

2019-04-03 06:26:18 +02:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

…

udp_offload.c

…

udp.c

bpf: Fix [::] -> [::1] rewrite in sys_sendmsg

2019-02-27 10:08:52 +01:00

udplite.c

…

xfrm6_input.c

…

xfrm6_mode_beet.c

…

xfrm6_mode_ro.c

…

xfrm6_mode_transport.c

…

xfrm6_mode_tunnel.c

…

xfrm6_output.c

…

xfrm6_policy.c

…

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

xfrm: clean up xfrm protocol checks

2019-05-25 18:23:41 +02:00