mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-07-22 05:47:30 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
f00a50876d2818bd6dc86fa98b3ef360884c53c8
linux/net/ipv4
History
Maoyi Xie 95cceadbfd net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink 
vti_changelink() operates on at most two netns, dev_net(dev) and the
tunnel link netns t->net. They differ once the device is created in or
moved to a netns other than the one the request runs in. The rtnl
changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a
caller privileged there but not in t->net can rewrite a tunnel that
lives in t->net.

Gate vti_changelink() on rtnl_dev_link_net_capable() at its top,
before any attribute is parsed.

Reported-by: Xiao Liang <shaw.leon@gmail.com>
Closes: https://lore.kernel.org/netdev/CABAhCOSzP1vaThGV35_VnsRCb=87_CPjPVsTHbq905k8A+BuUg@mail.gmail.com/
Fixes: 895de9a348 ("vti4: Enable namespace changing")
Cc: stable@vger.kernel.org
Signed-off-by: Maoyi Xie <maoyixie.tju@gmail.com>
Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com>
Link: https://patch.msgid.link/20260612085941.3158249-4-maoyixie.tju@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
2026-06-17 16:01:52 -07:00
..
netfilter
Merge tag 'nf-next-26-06-14' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next
2026-06-15 14:09:57 -07:00
af_inet.c
ipv4: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()
2026-06-05 17:47:07 -07:00
ah4.c
xfrm: ah: use skb_to_full_sk in async output callbacks
2026-05-16 10:56:14 +02:00
arp.c
net: remove ax25 and amateur radio (hamradio) subsystem
2026-04-23 10:24:02 -07:00
bpf_tcp_ca.c
bpf: Reject TCP_NODELAY in bpf-tcp-cc
2026-04-22 12:58:57 -07:00
cipso_ipv4.c
Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses
2026-02-22 08:26:33 -08:00
datagram.c
net: Convert proto callbacks from sockaddr to sockaddr_unsized
2025-11-04 19:10:33 -08:00
devinet.c
ipv4: handle devconf post-set actions on netlink updates
2026-06-13 14:15:53 -07:00
esp4_offload.c
xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
2025-12-04 09:54:53 +01:00
esp4.c
esp: fix page frag reference leak on skb_to_sgvec failure
2026-06-09 15:58:17 +02:00
fib_frontend.c
ipv4: fib_rule: Move fib4_rules_exit() to ->exit().
2026-06-16 15:42:53 -07:00
fib_lookup.h
ipv4: fib: Annotate access to struct fib_alias.fa_state.
2026-01-28 19:33:07 -08:00
fib_notifier.c
net: do not acquire rtnl in fib_seq_sum()
2024-10-11 15:35:05 -07:00
fib_rules.c
ipv4: fib_rule: Move fib4_rules_exit() to ->exit().
2026-06-16 15:42:53 -07:00
fib_semantics.c
ipv4: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()
2026-06-05 17:47:07 -07:00
fib_trie.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-06-16 14:59:58 -07:00
fou_bpf.c
ip_tunnel: convert __be16 tunnel flags to bitmaps
2024-04-01 10:49:28 +01:00
fou_core.c
fou: Store struct sock in struct fou.
2026-05-05 17:47:05 -07:00
fou_nl.c
fou: Don't allow 0 for FOU_ATTR_IPPROTO.
2026-01-17 16:00:24 -08:00
fou_nl.h
tools: ynl-gen: add regeneration comment
2025-11-25 19:20:42 -08:00
gre_demux.c
gre: Count GRE packet drops
2026-04-12 12:33:33 -07:00
gre_offload.c
net: gro: rename skb_gro_header_hard()
2024-03-05 13:30:11 +01:00
icmp.c
ipv4: icmp: reject broadcast/multicast routes
2026-05-20 19:00:02 -07:00
igmp_internal.h
netlink: support dumping IPv4 multicast addresses
2025-02-11 11:26:53 +01:00
igmp.c
ipv4: igmp: annotate data-races around timer-related fields
2026-06-09 13:19:33 +02:00
inet_connection_sock.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-06-16 14:59:58 -07:00
inet_diag.c
inet_diag: report delayed ack timer information
2026-03-06 16:32:26 -08:00
inet_fragment.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-06-11 14:33:35 -07:00
inet_hashtables.c
net: remove some unused EXPORT_SYMBOL()s
2026-06-12 16:43:11 -07:00
inet_timewait_sock.c
inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
2025-10-17 16:08:43 -07:00
inetpeer.c
inetpeer: add a missing read_seqretry() in inet_getpeer()
2026-05-06 17:44:13 -07:00
ip_forward.c
net: fix IPSTATS_MIB_OUTFORWDATAGRAMS increment after fragment check
2023-10-13 09:58:45 -07:00
ip_fragment.c
inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
2026-06-04 18:05:23 -07:00
ip_gre.c
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
2026-06-17 16:01:52 -07:00
ip_input.c
tcp: move tcp_v4_early_demux() to net/ipv4/ip_input.c
2026-03-09 18:50:24 -07:00
ip_options.c
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
2026-06-03 18:53:14 -07:00
ip_output.c
ipv4: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()
2026-06-05 17:47:07 -07:00
ip_sockglue.c
net: remove addr_len argument of recvmsg() handlers
2026-03-02 18:17:17 -08:00
ip_tunnel_core.c
tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()
2026-05-26 18:11:47 -07:00
ip_tunnel.c
ip_tunnel: annotate data-races around t->err_count and t->err_time
2026-06-12 16:40:32 -07:00
ip_vti.c
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
2026-06-17 16:01:52 -07:00
ipcomp.c
xfrm: add extack to xfrm_init_state
2026-06-04 12:22:35 +02:00
ipconfig.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
ipip.c
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
2026-06-17 16:01:52 -07:00
ipmr_base.c
ipmr: Replace use of system_unbound_wq with system_dfl_wq
2026-05-19 18:21:39 -07:00
ipmr.c
ipmr: Convert mr_table.cache_resolve_queue_len to u32.
2026-06-11 15:17:30 -07:00
Kconfig
net/tcp: Remove tcp_sigpool
2026-04-30 09:38:56 +02:00
Makefile
netfilter: add option for GCOV profiling
2026-05-24 22:55:47 +02:00
metrics.c
net: remove EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL() macros
2026-03-29 11:21:22 -07:00
netfilter.c
net: Add SPDX ids to some source files
2026-03-09 18:32:45 -07:00
netlink.c
…
nexthop.c
ipv4: Add __must_check to nexthop removal functions
2026-05-10 10:16:01 -07:00
ping.c
Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2026-04-14 18:36:10 -07:00
proc.c
udp: Remove UDP-Lite SNMP stats.
2026-03-13 18:57:44 -07:00
protocol.c
…
raw_diag.c
inet_diag: change inet_diag_bc_sk() first argument
2025-08-29 19:29:24 -07:00
raw.c
ipv4: raw: remove six obsolete EXPORT_SYMBOL_GPL()
2026-06-03 18:53:37 -07:00
route.c
ipv4: remove obsolete EXPORT_SYMBOL() and EXPORT_SYMBOL_GPL()
2026-06-05 17:47:07 -07:00
syncookies.c
tcp: rehash onto different local ECMP path on retransmit timeout
2026-06-15 15:57:31 -07:00
sysctl_net_ipv4.c
ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table()
2026-05-22 19:05:31 -07:00
tcp_ao.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-05-14 10:08:06 -07:00
tcp_bbr.c
tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR BSD-3-Clause
2026-06-01 16:51:08 -07:00
tcp_bic.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_bpf.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2026-03-05 12:11:05 -08:00
tcp_cdg.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_cong.c
tcp: ECT_1_NEGOTIATION and NEEDS_ACCECN identifiers
2026-02-03 15:13:24 +01:00
tcp_cubic.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_dctcp.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_dctcp.h
net: Add SPDX ids to some source files
2026-03-09 18:32:45 -07:00
tcp_diag.c
inet_diag: report delayed ack timer information
2026-03-06 16:32:26 -08:00
tcp_fastopen.c
net: remove EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL() macros
2026-03-29 11:21:22 -07:00
tcp_highspeed.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_htcp.c
tcp: Use clamp() in htcp_alpha_update()
2024-08-06 12:16:25 -07:00
tcp_hybla.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_illinois.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_input.c
tcp: rehash onto different local ECMP path on retransmit timeout
2026-06-15 15:57:31 -07:00
tcp_ipv4.c
net: remove some unused EXPORT_SYMBOL()s
2026-06-12 16:43:11 -07:00
tcp_lp.c
net: tcp_lp: fix kernel-doc warnings and update outdated reference links
2025-10-28 17:52:44 -07:00
tcp_metrics.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_minisocks.c
net: remove some unused EXPORT_SYMBOL()s
2026-06-12 16:43:11 -07:00
tcp_nv.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_offload.c
gro: flushing when CWR is set negatively affects AccECN
2026-02-03 15:13:24 +01:00
tcp_output.c
tcp: allow mptcp to drop TS for some packets
2026-06-11 15:33:37 -07:00
tcp_plb.c
tcp: rehash onto different local ECMP path on retransmit timeout
2026-06-15 15:57:31 -07:00
tcp_recovery.c
tcp: move tcp_rack_advance() to tcp_input.c
2026-01-28 19:31:51 -08:00
tcp_scalable.c
tcp: add accessors to read/set tp->snd_cwnd
2022-04-06 12:05:41 -07:00
tcp_timer.c
tcp: rehash onto different local ECMP path on retransmit timeout
2026-06-15 15:57:31 -07:00
tcp_ulp.c
net/ulp: use consistent error code when blocking ULP
2023-01-19 09:26:16 -08:00
tcp_vegas.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_vegas.h
tcp: add cwnd_event_tx_start to tcp_congestion_ops
2026-03-24 21:00:38 -07:00
tcp_veno.c
tcp: add cwnd_event_tx_start to tcp_congestion_ops
2026-03-24 21:00:38 -07:00
tcp_westwood.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp_yeah.c
tcp: annotate data-races around tp->snd_ssthresh
2026-04-18 11:10:12 -07:00
tcp.c
net: remove some unused EXPORT_SYMBOL()s
2026-06-12 16:43:11 -07:00
tunnel4.c
net: fill in MODULE_DESCRIPTION()s for ipv4 modules
2024-02-09 14:12:02 -08:00
udp_bpf.c
ipv4: Retire UDP-Lite.
2026-03-13 18:57:44 -07:00
udp_diag.c
udp: Don't pass udptable to IPv4 socket lookup functions.
2026-03-13 18:57:46 -07:00
udp_offload.c
udp: Fix UDP length on last GSO_PARTIAL segment
2026-05-20 15:03:47 -07:00
udp_tunnel_core.c
udp_tunnel: Remove synchronize_rcu() in udp_tunnel_sock_release().
2026-05-05 17:47:06 -07:00
udp_tunnel_nic.c
Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses
2026-02-22 08:26:33 -08:00
udp_tunnel_stub.c
…
udp.c
udp: clear skb->dev before running a sockmap verdict
2026-06-04 09:01:51 -07:00
xfrm4_input.c
xfrm: hold dev ref until after transport_finish NF_HOOK
2026-04-07 10:12:40 +02:00
xfrm4_output.c
ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
2025-07-02 14:32:30 -07:00
xfrm4_policy.c
ipv4: Convert ->flowi4_tos to dscp_t.
2025-08-26 17:34:31 -07:00
xfrm4_protocol.c
ipv4: Convert ip_route_input_noref() to dscp_t.
2024-10-03 16:21:21 -07:00
xfrm4_state.c
…
xfrm4_tunnel.c
net: fill in MODULE_DESCRIPTION()s for ipv4 modules
2024-02-09 14:12:02 -08:00