mirrors/linux
1
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-04-05 10:45:23 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
3e36031cc0540ca97b615cbb940331892cbd3d21
linux/net
History
Paolo Abeni 337cebbd85 mptcp: really cope with fastopen race 
Fastopen and PM-trigger subflow shutdown can race, as reported by
syzkaller.

In my first attempt to close such race, I missed the fact that
the subflow status can change again before the subflow_state_change
callback is invoked.

Address the issue additionally copying with all the states directly
reachable from TCP_FIN_WAIT1.

Fixes: 1e777f39b4 ("mptcp: add MSG_FASTOPEN sendmsg flag support")
Fixes: 4fd19a3070 ("mptcp: fix inconsistent state on fastopen race")
Cc: stable@vger.kernel.org
Reported-by: syzbot+c53d4d3ddb327e80bc51@syzkaller.appspotmail.com
Closes: https://github.com/multipath-tcp/mptcp_net-next/issues/458
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Reviewed-by: Mat Martineau <martineau@kernel.org>
Signed-off-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2024-02-12 10:08:13 +00:00
..
6lowpan
net: fill in MODULE_DESCRIPTION()s for 6LoWPAN
2024-02-09 14:12:01 -08:00
9p
net: 9p: avoid freeing uninit memory in p9pdu_vreadf
2023-12-13 05:44:30 +09:00
802
net: fill in MODULE_DESCRIPTION()s under net/802*
2023-10-28 11:29:28 +01:00
8021q
vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
2024-01-19 21:25:06 -08:00
appletalk
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
atm
net: fill in MODULE_DESCRIPTION()s for mpoa
2024-02-09 14:12:01 -08:00
ax25
net: implement lockless SO_PRIORITY
2023-10-01 19:09:54 +01:00
batman-adv
batman-adv: mcast: fix memory leak on deleting a batman-adv interface
2024-01-27 09:13:39 +01:00
bluetooth
Merge tag 'tty-6.8-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
2024-01-18 11:37:24 -08:00
bpf
bpf: Fix dtor CFI
2023-12-15 16:25:55 -08:00
bridge
bridge: mcast: fix disabled snooping after long uptime
2024-01-30 18:06:56 -08:00
caif
net: fill in MODULE_DESCRIPTION()s for CAIF
2024-01-05 08:06:35 -08:00
can
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-10-12 17:07:34 -07:00
ceph
libceph: remove MAX_EXTENTS check for sparse reads
2024-01-15 15:40:50 +01:00
core
net-device: move lstats in net_device_read_txrx
2024-02-12 09:51:26 +00:00
dcb
net: dcb: choose correct policy to parse DCB_ATTR_BCN
2023-08-01 21:07:46 -07:00
dccp
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
devlink
devlink: avoid potential loop in devlink_rel_nested_in_notify_work()
2024-02-06 18:45:16 -08:00
dns_resolver
Merge tag 'net-next-6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2024-01-11 10:07:29 -08:00
dsa
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
2024-01-11 16:33:52 -08:00
ethernet
…
ethtool
ethtool: netlink: Add missing ethnl_ops_begin/complete
2024-01-18 13:21:06 +01:00
handshake
net/handshake: Fix handshake_req_destroy_test1
2024-02-08 18:32:29 -08:00
hsr
net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
2024-01-29 11:29:55 +00:00
ieee802154
mac802154: Avoid new associations while disassociating
2023-12-15 11:14:57 +01:00
ife
net: sched: ife: fix potential use-after-free
2023-12-15 10:50:18 +00:00
ipv4
tcp: move tp->scaling_ratio to tcp_sock_read_txrx group
2024-02-12 09:51:26 +00:00
ipv6
net: fill in MODULE_DESCRIPTION()s for ipv6 modules
2024-02-09 14:12:01 -08:00
iucv
iucv: make iucv_bus const
2023-12-29 07:46:38 +00:00
kcm
net: kcm: fix direct access to bv_len
2024-01-03 18:37:22 -08:00
key
net: fill in MODULE_DESCRIPTION()s for af_key
2024-02-09 14:12:01 -08:00
l2tp
ipv6: annotate data-races around np->ucast_oif
2023-12-11 10:59:17 +00:00
l3mdev
…
lapb
…
llc
llc: call sock_orphan() at release time
2024-01-30 13:49:09 +01:00
mac80211
wifi: mac80211: accept broadcast probe responses on 6 GHz
2024-02-02 13:11:59 +01:00
mac802154
mac802154: Avoid new associations while disassociating
2023-12-15 11:14:57 +01:00
mctp
mctp: perform route lookups under a RCU read-side lock
2023-10-10 19:43:22 -07:00
mpls
networking: Update to register_net_sysctl_sz
2023-08-15 15:26:18 -07:00
mptcp
mptcp: really cope with fastopen race
2024-02-12 10:08:13 +00:00
ncsi
net/ncsi: Add NC-SI 1.2 Get MC MAC Address command
2023-11-18 15:00:51 +00:00
netfilter
netfilter: nft_set_pipapo: remove scratch_aligned pointer
2024-02-08 12:24:02 +01:00
netlabel
calipso: fix memory leak in netlbl_calipso_add_pass()
2023-12-07 14:23:12 -05:00
netlink
netlink: fix potential sleeping issue in mqueue_flush_file
2024-01-23 11:21:18 +01:00
netrom
net: implement lockless SO_PRIORITY
2023-10-01 19:09:54 +01:00
nfc
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
2024-01-29 12:05:31 +00:00
nsh
net: move gso declarations and functions to their own files
2023-06-10 00:11:41 -07:00
openvswitch
net: openvswitch: limit the number of recursions from action sets
2024-02-09 12:54:38 -08:00
packet
net: fill in MODULE_DESCRIPTION() for AF_PACKET
2024-01-05 08:06:35 -08:00
phonet
sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)
2023-06-24 15:50:13 -07:00
psample
genetlink: Use internal flags for multicast groups
2023-12-29 08:43:59 +00:00
qrtr
net: qrtr: ns: Return 0 if server port is not present
2024-01-01 18:41:29 +00:00
rds
net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
2024-01-22 11:24:00 +00:00
rfkill
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-12-21 22:17:23 +01:00
rose
net/rose: fix races in rose_kill_by_device()
2023-12-15 11:59:53 +00:00
rxrpc
rxrpc: Fix counting of new acks and nacks
2024-02-05 12:34:07 +00:00
sched
net: fill in MODULE_DESCRIPTION()s for net/sched
2024-02-09 14:12:02 -08:00
sctp
sctp: fix busy polling
2024-01-04 10:29:18 +00:00
smc
net/smc: fix incorrect SMC-D link group matching logic
2024-01-26 14:06:05 -08:00
strparser
…
sunrpc
NFSv4.1: Assign the right value for initval and retries for rpc timeout
2024-01-29 13:39:48 -05:00
switchdev
net: switchdev: Add a helper to replay objects on a bridge port
2023-07-21 08:54:03 +01:00
tipc
tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
2024-02-06 08:49:26 +01:00
tls
net: tls: fix returned read length with async decrypt
2024-02-10 21:38:19 +00:00
unix
af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.
2024-02-06 18:33:07 -08:00
vmw_vsock
vsock/virtio: use skb_frag_*() helpers
2024-01-03 18:37:16 -08:00
wireless
wifi: cfg80211: detect stuck ECSA element in probe resp
2024-02-02 13:08:58 +01:00
x25
net: remove SOCK_DEBUG leftovers
2023-12-26 20:31:01 +00:00
xdp
xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags
2024-01-24 16:24:06 -08:00
xfrm
net: fill in MODULE_DESCRIPTION()s for xfrm
2024-02-09 14:12:01 -08:00
compat.c
file: stop exposing receive_fd_user()
2023-12-12 14:24:14 +01:00
devres.c
…
Kconfig
bpfilter: remove bpfilter
2024-01-04 10:23:10 -08:00
Kconfig.debug
…
Makefile
bpfilter: remove bpfilter
2024-01-04 10:23:10 -08:00
socket.c
Merge tag 'vfs-6.8.iov_iter' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs
2024-01-08 11:43:04 -08:00
sysctl_net.c
sysctl: Add size to register_net_sysctl function
2023-08-15 15:26:17 -07:00