Eric Dumazet d37fe4255a tcp: fix race in tcp_v6_syn_recv_sock() ...

tcp_v6_syn_recv_sock() calls ip6_dst_store() before
inet_sk(newsk)->pinet6 has been set up.

This means ip6_dst_store() writes over the parent (listener)
np->dst_cookie.

This is racy because multiple threads could share the same
parent and their final np->dst_cookie could be wrong.

Move ip6_dst_store() call after inet_sk(newsk)->pinet6
has been changed and after the copy of parent ipv6_pinfo.

Fixes: e994b2f0fb ("tcp: do not lock listener to process SYN packets")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

2024-06-10 13:11:22 +01:00

..

6lowpan

net: fill in MODULE_DESCRIPTION()s for 6LoWPAN

2024-02-09 14:12:01 -08:00

9p

Merge tag '9p-for-6.10-rc2' of https://github.com/martinetd/linux

2024-05-29 09:25:15 -07:00

802

net: fill in MODULE_DESCRIPTION()s under net/802*

2023-10-28 11:29:28 +01:00

8021q

net: annotate writes on dev->mtu from ndo_change_mtu()

2024-05-07 16:19:14 -07:00

appletalk

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-09 10:01:01 -07:00

atm

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

ax25

ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()

2024-06-01 15:49:42 -07:00

batman-adv

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

bluetooth

Merge tag 'net-accept-more-20240515' of git://git.kernel.dk/linux

2024-05-18 10:32:39 -07:00

bpf

bpf: Set run context for rawtp test_run callback

2024-06-05 09:41:33 +02:00

bridge

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2024-05-15 07:30:49 -07:00

caif

caif: Use UTILITY_NAME_LENGTH instead of hard-coding 16

2024-04-02 18:20:00 -07:00

can

Merge tag 'linux-can-next-for-6.9-20240220' of git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can-next

2024-02-20 15:32:45 +01:00

ceph

libceph: init the cursor when preparing sparse read in msgr2

2024-03-06 12:43:01 +01:00

core

rtnetlink: make the "split" NLM_DONE handling generic

2024-06-05 12:34:54 +01:00

dcb

…

dccp

net: dccp: Fix ccid2_rtt_estimator() kernel-doc

2024-05-07 16:15:08 -07:00

devlink

devlink: extend devlink_param *set pointer

2024-04-22 13:05:19 -07:00

dns_resolver

Merge tag 'net-next-6.8' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2024-01-11 10:07:29 -08:00

dsa

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

ethernet

netkit: Fix pkt_type override upon netkit pass verdict

2024-05-25 10:48:57 -07:00

ethtool

net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()

2024-06-06 13:34:33 +02:00

handshake

net/handshake: remove redundant assignment to variable ret

2024-04-16 17:14:55 -07:00

hsr

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-09 10:01:01 -07:00

ieee802154

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

ife

net: sched: ife: fix potential use-after-free

2023-12-15 10:50:18 +00:00

ipv4

rtnetlink: make the "split" NLM_DONE handling generic

2024-06-05 12:34:54 +01:00

ipv6

tcp: fix race in tcp_v6_syn_recv_sock()

2024-06-10 13:11:22 +01:00

iucv

Merge tag 's390-6.10-2' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

2024-05-21 12:09:36 -07:00

kcm

net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function

2024-03-11 09:53:22 +00:00

key

net: fill in MODULE_DESCRIPTION()s for af_key

2024-02-09 14:12:01 -08:00

l2tp

l2tp: fix ICMP error handling for UDP-encap sockets

2024-05-17 12:15:22 -07:00

l3mdev

…

lapb

…

llc

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

mac80211

wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()

2024-05-29 15:58:54 +02:00

mac802154

mac802154: fix llsec key resources release in mac802154_llsec_key_del

2024-03-06 21:01:26 +01:00

mctp

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-02-29 14:24:56 -08:00

mpls

net: Remove the now superfluous sentinel elements from ctl_table array

2024-05-03 13:29:41 +01:00

mptcp

mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB

2024-06-05 12:32:47 +01:00

ncsi

net/ncsi: Fix the multi thread manner of NCSI driver

2024-06-01 16:21:44 -07:00

netfilter

netfilter: nft_fib: allow from forward/input without iif selector

2024-05-29 00:37:51 +02:00

netlabel

netlabel: fix RCU annotation for IPv4 options on socket creation

2024-05-13 14:58:12 -07:00

netlink

netlink: support all extack types in dumps

2024-04-23 10:09:49 -07:00

netrom

Merge tag 'net-accept-more-20240515' of git://git.kernel.dk/linux

2024-05-18 10:32:39 -07:00

nfc

Merge tag 'net-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-23 12:49:37 -07:00

nsh

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

2024-04-26 12:20:01 +02:00

openvswitch

Merge tag 'net-6.10-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-23 12:49:37 -07:00

packet

af_packet: do not call packet_read_pending() from tpacket_destruct_skb()

2024-05-16 19:38:05 -07:00

phonet

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

psample

ip_tunnel: convert __be16 tunnel flags to bitmaps

2024-04-01 10:49:28 +01:00

qrtr

net: qrtr: ns: Fix module refcnt

2024-05-16 09:47:45 +01:00

rds

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

rfkill

net: rfkill: gpio: Convert to platform remove callback returning void

2024-03-25 15:40:22 +01:00

rose

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

rxrpc

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2024-05-09 10:01:01 -07:00

sched

net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP

2024-06-05 15:54:51 -07:00

sctp

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

smc

net/smc: avoid overwriting when adjusting sock bufsizes

2024-06-05 09:42:57 +01:00

strparser

…

sunrpc

Merge tag 'nfs-for-6.10-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2024-05-23 13:51:09 -07:00

switchdev

net: bridge: switchdev: Improve error message for port_obj_add/del functions

2024-05-08 12:19:12 +01:00

tipc

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

tls

tls: fix missing memory barrier in tls_init

2024-05-23 12:03:26 +02:00

unix

af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().

2024-06-06 12:57:15 +02:00

vmw_vsock

Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost

2024-05-23 12:04:36 -07:00

wireless

wifi: cfg80211: fix 6 GHz scan request building

2024-05-29 15:25:25 +02:00

x25

net: change proto and proto_ops accept type

2024-05-13 18:19:09 -06:00

xdp

Revert "xsk: Support redirect to any socket bound to the same umem"

2024-06-05 09:42:30 +02:00

xfrm

net: fix __dst_negative_advice() race

2024-05-29 17:34:49 -07:00

compat.c

file: stop exposing receive_fd_user()

2023-12-12 14:24:14 +01:00

devres.c

…

Kconfig

net: add IEEE 802.1q specific helpers

2024-05-08 10:35:09 +01:00

Kconfig.debug

…

Makefile

af_unix: Remove CONFIG_UNIX_SCM.

2024-01-31 16:41:16 -08:00

socket.c

net: have do_accept() take a struct proto_accept_arg argument

2024-05-13 18:19:19 -06:00

sysctl_net.c

sysctl: treewide: constify argument ctl_table_root::permissions(table)

2024-04-24 09:43:54 +02:00