Eric Dumazet c38b8f5f79 net: prevent NULL deref in ip[6]tunnel_xmit() ...

Blamed commit missed that both functions can be called with dev == NULL.

Also add unlikely() hints for these conditions that only fuzzers can hit.

Fixes: 6f1a9140ec ("net: add xmit recursion limit to tunnel xmit functions")
Signed-off-by: Eric Dumazet <edumazet@google.com>
CC: Weiming Shi <bestswngs@gmail.com>
Link: https://patch.msgid.link/20260312043908.2790803-1-edumazet@google.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>

2026-03-12 16:03:41 +01:00

..

6lowpan

net: replace ND_PRINTK with dynamic debug

2025-07-10 15:27:32 -07:00

9p

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

802

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

8021q

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

appletalk

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

atm

atm: lec: fix null-ptr-deref in lec_arp_clear_vccs

2026-02-28 09:33:26 -08:00

ax25

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

batman-adv

Merge tag 'batadv-net-pullrequest-20260225' of https://git.open-mesh.org/linux-merge

2026-02-26 19:15:09 -08:00

bluetooth

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

bpf

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

bridge

net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled

2026-03-05 07:52:56 -08:00

caif

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

can

can: bcm: fix locking for bcm_op runtime updates

2026-03-02 10:24:40 +01:00

ceph

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

core

neighbour: restore protocol != 0 check in pneigh update

2026-03-11 19:04:55 -07:00

dcb

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

devlink

Convert 'alloc_flex' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

dns_resolver

net/dns_resolver: use credential guards in dns_query()

2025-11-04 12:36:51 +01:00

dsa

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ethernet

net: optimize eth_type_trans() vs CONFIG_STACKPROTECTOR_STRONG=y

2025-11-24 19:27:31 -08:00

ethtool

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

handshake

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

hsr

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ieee802154

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ife

…

ipv4

net: prevent NULL deref in ip[6]tunnel_xmit()

2026-03-12 16:03:41 +01:00

ipv6

ipv6: move the disable_ipv6_mod knob to core code

2026-03-11 17:53:37 -07:00

iucv

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

kcm

kcm: fix zero-frag skb in frag_list on partial sendmsg error

2026-02-23 17:26:55 -08:00

key

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

l2tp

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

l3mdev

net: fib_rules: Fix iif / oif matching on L3 master device

2025-04-15 17:54:56 -07:00

lapb

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

llc

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

mac80211

wifi: mac80211: fix missing ieee80211_eml_params member initialization

2026-03-03 08:37:29 +01:00

mac802154

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

mctp

mctp: route: hold key->lock in mctp_flow_prepare_output()

2026-03-10 11:38:36 +01:00

mpls

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

mptcp

mptcp: pm: in-kernel: always mark signal+subflow endp as used

2026-03-04 18:21:13 -08:00

ncsi

net: ncsi: fix skb leak in error paths

2026-03-06 17:34:48 -08:00

netfilter

netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels

2026-03-10 14:10:43 +01:00

netlabel

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

netlink

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

netrom

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

nfc

nfc: rawsock: cancel tx_work before socket teardown

2026-03-04 18:18:57 -08:00

nsh

…

openvswitch

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

packet

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

phonet

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

psample

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

psp

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

qrtr

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

rds

net/rds: Fix circular locking dependency in rds_tcp_tune

2026-03-03 12:57:06 +01:00

rfkill

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

rose

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

rxrpc

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

2026-03-06 17:49:52 -08:00

sched

net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit

2026-03-06 17:45:37 -08:00

sctp

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

shaper

net-shapers: don't free reply skb after genlmsg_reply()

2026-03-10 19:29:09 -07:00

smc

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

strparser

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2025-11-13 12:35:38 -08:00

sunrpc

Convert more 'alloc_obj' cases to default GFP_KERNEL arguments

2026-02-21 20:03:00 -08:00

switchdev

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

tipc

tipc: fix divide-by-zero in tipc_sk_filter_connect()

2026-03-11 18:56:28 -07:00

tls

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

unix

net: annotate data-races around sk->sk_{data_ready,write_space}

2026-02-26 19:23:03 -08:00

vmw_vsock

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

wireless

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

x25

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

xdp

xsk: Fix zero-copy AF_XDP fragment drop

2026-02-28 08:55:11 -08:00

xfrm

Merge tag 'net-7.0-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2026-02-26 08:00:13 -08:00

compat.c

socket: Unify getsockname and getpeername implementation

2025-11-26 13:45:23 -07:00

devres.c

…

Kconfig

net: Kconfig: discourage drop_monitor enablement

2025-10-17 16:29:26 -07:00

Kconfig.debug

rtnetlink: Add per-netns RTNL.

2024-10-08 15:16:59 +02:00

Makefile

psp: base PSP device support

2025-09-18 12:32:06 +02:00

socket.c

net: Drop the lock in skb_may_tx_timestamp()

2026-02-24 11:27:29 +01:00

sysctl_net.c

…