mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-09-10 01:40:37 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
e1ad6fe5db719874efa45b2caf9934552e09fc43
linux/drivers
History
Marco Baffo e1ad6fe5db ovpn: fix use after free in unlock_ovpn() 
unlock_ovpn() iterates over the release_list using llist_for_each_entry()
and drops the peer reference inside the loop body via ovpn_peer_put().

If this drops the last reference, the peer is eventually freed. However,
llist_for_each_entry() reads peer->release_entry.next in the loop advance
expression, which runs after the body. By that time the peer may have
already been freed, resulting in a use after free when advancing to the
next list entry.

Fix this by using llist_for_each_entry_safe(), which caches the next
pointer before executing the loop body.

Fixes: 80747caef3 ("ovpn: introduce the ovpn_peer object")
Signed-off-by: Marco Baffo <marco@mandelbit.com>
Signed-off-by: Antonio Quartulli <antonio@openvpn.net>
2026-07-20 15:49:55 +02:00
..
accel
Merge tag 'drm-misc-fixes-2026-07-09' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
2026-07-10 13:03:15 +10:00
accessibility
…
acpi
Merge tag 'acpi-7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm
2026-07-03 15:13:50 -10:00
amba
…
android
rust_binder: clear freeze listener on node removal
2026-07-03 13:54:10 +02:00
ata
Merge tag 'ata-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/libata/linux
2026-07-10 09:17:00 -07:00
atm
atm: remove unused ATM PHY operations
2026-06-16 08:53:53 -07:00
auxdisplay
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
base
Merge tag 'regmap-fix-v7.2-merge-window' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap
2026-06-26 10:47:26 -07:00
bcma
…
block
Merge tag 'block-7.2-20260710' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux
2026-07-11 09:35:33 -07:00
bluetooth
Bluetooth: hci_qca: Clear memdump state on invalid dump size
2026-07-13 10:09:52 -04:00
bus
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cache
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cdrom
…
cdx
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
char
tpm: Make the TPM character devices non-seekable
2026-07-12 12:52:34 -07:00
clk
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
clocksource
…
comedi
…
connector
…
counter
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cpufreq
cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq
2026-07-09 20:31:57 +02:00
cpuidle
cpuidle: Allow exit latency to exceed target residency
2026-06-23 14:00:29 +02:00
crypto
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
cxl
…
dax
Merge tag 'mm-stable-2026-06-18-09-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-19 10:14:34 -07:00
dca
…
devfreq
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
dibs
dibs: loopback: validate offset and size in move_data()
2026-07-09 12:44:00 +02:00
dio
…
dma
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
dma-buf
Merge drm/drm-fixes into drm-misc-fixes
2026-06-29 17:58:00 +02:00
dpll
dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync()
2026-07-17 12:02:23 +02:00
edac
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
eisa
…
extcon
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
firewire
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
firmware
Merge tag 'soc-fixes-7.2-1' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2026-07-17 08:52:09 -07:00
fpga
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
fsi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
fwctl
…
gnss
…
gpib
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
gpio
gpio: mvebu: free generic chips on unbind
2026-07-08 14:05:11 +02:00
gpu
Merge tag 'soc-fixes-7.2-1' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2026-07-17 08:52:09 -07:00
greybus
…
hid
Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2026-07-12 12:37:28 -07:00
hsi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
hte
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
hv
Merge tag 'hyperv-next-signed-20260621' of git://git.kernel.org/pub/scm/linux/kernel/git/hyperv/linux
2026-06-22 08:06:13 -07:00
hwmon
Merge tag 'device-id-rework' of git://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/linux
2026-07-02 20:54:26 -10:00
hwspinlock
…
hwtracing
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
i2c
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
i3c
i3c: mipi-i3c-hci: Use named initializers for platform_device_id's .driver_data
2026-06-16 23:19:45 +02:00
idle
…
iio
Merge tag 'char-misc-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
2026-07-12 12:37:28 -07:00
infiniband
RDMA/irdma: Prevent overflows in memory contiguity checks
2026-07-05 07:02:35 -04:00
input
Merge tag 'input-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
2026-07-11 15:42:55 -07:00
interconnect
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
iommu
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ipack
…
irqchip
Merge tag 'irq-urgent-2026-07-05' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-07-05 05:29:41 -10:00
leds
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
macintosh
…
mailbox
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
mcb
…
md
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
2026-07-11 15:18:51 +02:00
media
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
memory
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
memstick
memstick: ms_block: reject a card that reports too many blocks
2026-07-06 17:09:30 +02:00
message
…
mfd
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
misc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
mmc
mmc: sdhci-esdhc-imx: fix resume error handling
2026-07-15 11:00:02 +02:00
most
…
mtd
Merge tag 'mtd/fixes-for-7.2-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/mtd/linux
2026-07-17 09:30:17 -07:00
mux
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
net
ovpn: fix use after free in unlock_ovpn()
2026-07-20 15:49:55 +02:00
nfc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ntb
Merge tag 'ntb-7.2' of https://github.com/jonmason/ntb
2026-06-28 07:46:12 -07:00
nubus
…
nvdimm
Merge tag 'libnvdimm-for-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm
2026-06-18 16:27:58 -07:00
nvme
Merge tag 'block-7.2-20260625' of git://git.kernel.org/pub/scm/linux/kernel/git/axboe/linux
2026-06-25 09:56:47 -07:00
nvmem
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
of
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
opp
…
parisc
…
parport
…
pci
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
pcmcia
…
peci
…
perf
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
phy
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
pinctrl
Merge tag 'gpio-fixes-for-v7.2-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/brgl/linux
2026-07-03 05:38:12 -10:00
platform
Merge tag 'platform-drivers-x86-v7.2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86
2026-07-10 09:51:45 -07:00
pmdomain
pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check
2026-07-13 12:42:17 +02:00
pnp
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
power
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
powercap
…
pps
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ps3
…
ptp
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
pwm
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
rapidio
Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-21 13:20:19 -07:00
ras
…
regulator
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
2026-07-09 01:41:17 +01:00
remoteproc
…
resctrl
…
reset
Merge tag 'reset-fixes-for-v7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/pza/linux into arm/fixes
2026-07-10 14:15:39 +02:00
rpmsg
Merge tag 'rpmsg-v7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/remoteproc/linux
2026-06-20 23:31:15 -07:00
rtc
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
s390
s390/zcrypt: Remove the empty file
2026-07-08 17:02:47 +02:00
sbus
…
scsi
Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-21 13:20:19 -07:00
sh
…
siox
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
slimbus
…
soc
Merge tag 'tegra-for-7.2-soc-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tegra/linux into arm/fixes
2026-07-10 14:42:00 +02:00
soundwire
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
spi
Merge tag 'spi-fix-v7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi
2026-07-05 05:24:06 -10:00
spmi
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
ssb
…
staging
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
2026-07-07 13:43:27 +02:00
target
…
tc
…
tee
Merge tag 'soc-drivers-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc
2026-06-17 11:21:40 -07:00
thermal
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
thunderbolt
Merge tag 'usb-7.2-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
2026-06-22 12:09:47 -07:00
tty
Merge tag 'tty-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty
2026-07-12 12:29:38 -07:00
ufs
ufs: core: tracing: Do not dereference pointers in TP_printk()
2026-07-07 10:42:28 -04:00
uio
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
usb
Merge tag 'usb-7.2-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb
2026-07-12 12:12:41 -07:00
vdpa
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
vfio
vfio/pci: Expose latched module parameter policy in debugfs
2026-06-29 14:26:31 -06:00
vhost
Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm
2026-06-21 13:20:19 -07:00
video
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
virt
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
virtio
Merge tag 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost
2026-06-17 11:49:00 -07:00
w1
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
watchdog
Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)
2026-07-03 07:38:17 +02:00
xen
xenbus: reject unterminated directory replies
2026-07-01 10:01:14 +02:00
zorro
…
Kconfig
…
Makefile
…