Christoph Böhmwalder c71bf113df drbd: don't leak the shared secret to unprivileged netlink dumps ...

The conversion to explicit netlink serialization dropped the
exclude_sensitive parameter from net_conf_to_skb(), so each caller has
to sanitize by hand. Two dump paths were missed:
drbd_nl_get_connections_dumpit() and the volume-less connection branch
of get_one_status(). Neither op carries GENL_ADMIN_PERM, so any
unprivileged local user could read the CRAM-HMAC secret.

Add a net_conf_to_skb_sanitized() wrapper and route all three callers
through it.

Fixes: 8098eeb693 ("drbd: replace genl_magic with explicit netlink serialization")
Reported-by: Vivek Parikh <vivek.parikh@breachx.ai>
Signed-off-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com>
Link: https://patch.msgid.link/20260814151617.73752-1-christoph.boehmwalder@linbit.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>

2026-08-15 20:00:10 -06:00

..

drbd_actlog.c

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-02-19 08:21:53 -07:00

drbd_bitmap.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

drbd_buildtag.c

drbd: move UAPI headers to include/uapi/linux/

2026-05-08 19:23:23 -06:00

drbd_config.h

drbd: move UAPI headers to include/uapi/linux/

2026-05-08 19:23:23 -06:00

drbd_debugfs.c

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_debugfs.h

drbd: use consistent license

2022-11-22 19:38:39 -07:00

drbd_int.h

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_interval.c

drbd: drbd_insert_interval(): Clarify comment

2023-01-29 15:18:33 -07:00

drbd_interval.h

drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()

2026-02-19 08:21:53 -07:00

drbd_main.c

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_nl_gen.c

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_nl_gen.h

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_nl.c

drbd: don't leak the shared secret to unprivileged netlink dumps

2026-08-15 20:00:10 -06:00

drbd_polymorph_printk.h

drbd: add context parameter to expect() macro

2022-12-01 11:33:49 -07:00

drbd_proc.c

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00

drbd_protocol.h

drbd: use consistent license

2022-11-22 19:38:39 -07:00

drbd_receiver.c

drbd: reject data replies with an out-of-range payload size

2026-07-10 06:49:11 -06:00

drbd_req.c

drbd: fix null-pointer dereference on local read error

2026-02-20 07:09:06 -07:00

drbd_req.h

drbd: pass drbd_peer_device to __req_mod

2023-04-01 20:27:55 -06:00

drbd_state_change.h

drbd: fix function cast warnings in state machine

2024-02-13 08:55:40 -07:00

drbd_state.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

drbd_state.h

drbd: use consistent license

2022-11-22 19:38:39 -07:00

drbd_strings.c

drbd: use consistent license

2022-11-22 19:38:39 -07:00

drbd_strings.h

drbd: use consistent license

2022-11-22 19:38:39 -07:00

drbd_vli.h

drbd: remove unnecessary assignment in vli_encode_bits

2023-01-29 15:18:33 -07:00

drbd_worker.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

Kconfig

lib/crc: remove CONFIG_LIBCRC32C

2025-04-04 11:31:42 -07:00

Makefile

drbd: replace genl_magic with explicit netlink serialization

2026-05-08 19:23:23 -06:00