kernel/linux
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/ synced 2026-10-20 19:23:40 +00:00
Code Issues Releases Packages Activity
linux/drivers
History
Christoph Böhmwalder c71bf113df drbd: don't leak the shared secret to unprivileged netlink dumps 
The conversion to explicit netlink serialization dropped the
exclude_sensitive parameter from net_conf_to_skb(), so each caller has
to sanitize by hand. Two dump paths were missed:
drbd_nl_get_connections_dumpit() and the volume-less connection branch
of get_one_status(). Neither op carries GENL_ADMIN_PERM, so any
unprivileged local user could read the CRAM-HMAC secret.

Add a net_conf_to_skb_sanitized() wrapper and route all three callers
through it.

Fixes: 8098eeb693 ("drbd: replace genl_magic with explicit netlink serialization")
Reported-by: Vivek Parikh <vivek.parikh@breachx.ai>
Signed-off-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com>
Link: https://patch.msgid.link/20260814151617.73752-1-christoph.boehmwalder@linbit.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
History 2026-08-15 20:00:10 -06:00
..
accel accel/amdxdna: Fix mm_struct reference leak in aie2_populate_range() 2026-06-11 09:50:07 -07:00
accessibility Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
acpi spi: Updates for v7.2 2026-06-16 07:56:47 +05:30
amba amba: use generic driver_override infrastructure 2026-05-30 22:25:23 +02:00
android rust_binder: Avoid holding lock when dropping delivered_death 2026-05-22 11:55:48 +02:00
ata ata: libata-scsi: do not needlessly defer commands when using PMP with FBS 2026-05-18 12:26:51 +02:00
atm net: remove unused ATM protocols and legacy ATM device drivers 2026-04-23 12:21:14 -07:00
auxdisplay auxdisplay: Kconfig: drop unneeded quotes in PANEL_BOOT_MESSAGE dep 2026-05-17 07:58:30 +02:00
base regmap: Update for v7.2 2026-06-16 07:48:30 +05:30
bcma Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
block drbd: don't leak the shared secret to unprivileged netlink dumps 2026-08-15 20:00:10 -06:00
bluetooth Bluetooth: hci_qca: Use 100 ms SSR delay for rampatch and NVM loading 2026-05-27 16:44:02 -04:00
bus gpio updates for v7.2-rc1 2026-06-16 07:30:52 +05:30
cache cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() 2026-02-06 19:54:40 +00:00
cdrom cdrom: fix stack out-of-bounds read in CDROMVOLCTRL 2026-07-20 21:54:52 -06:00
cdx cdx: use generic driver_override infrastructure 2026-05-30 22:25:32 +02:00
char This update includes the following changes: 2026-06-16 09:01:23 +05:30
clk Qualcomm clock fixes for v7.1 2026-05-28 18:21:54 -07:00
clocksource A series of updates for the VDSO: 2026-06-15 13:57:13 +05:30
comedi comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() 2026-05-21 10:34:04 +02:00
connector Convert more 'alloc_obj' cases to default GFP_KERNEL arguments 2026-02-21 20:03:00 -08:00
counter counter: Fix refcount leak in counter_alloc() error path 2026-05-03 13:48:39 +09:00
cpufreq x86/cpu updates for v7.2: 2026-06-15 15:25:17 +05:30
cpuidle powerpc updates for 7.1 2026-04-14 17:10:15 -07:00
crypto This update includes the following changes: 2026-06-16 09:01:23 +05:30
cxl CXL changes for v7.1 2026-04-17 15:52:58 -07:00
dax dax changes for 7.1 2026-04-21 14:12:01 -07:00
dca treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
devfreq devfreq: change devfreq_event_class to a const struct 2026-05-22 13:28:46 +02:00
dibs dibs: change dibs_class to a const struct 2026-03-04 18:48:15 -08:00
dio dio: Use tabs and avoid continuation logging in dio_init 2026-05-18 11:16:26 +02:00
dma driver core: Replace dev->dma_coherent with dev_dma_coherent() 2026-04-26 23:43:58 +02:00
dma-buf dma-buf: fix UAF in dma_buf_fd() tracepoint 2026-05-28 20:05:43 +05:30
dpll dpll: zl3073x: make frequency monitor a per-device attribute 2026-05-28 14:05:29 +02:00
edac EDAC: Consistently define pci_device_ids using named initializers 2026-05-29 13:28:36 -07:00
eisa Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
extcon extcon: usbc-tusb320: Make typec-power-opmode optional 2026-03-20 11:20:43 +09:00
firewire bonding: prevent potential infinite loop in bond_header_parse() 2026-03-16 19:29:45 -07:00
firmware chrome-platform-firmware: Updates for v7.2 2026-06-16 07:21:48 +05:30
fpga fpga: m10bmc-sec: switch show_canceled_csk() to using sysfs_emit() 2026-03-25 14:57:26 +08:00
fsi Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
fwctl fwctl: pds: Validate RPC input size before parsing 2026-05-19 10:44:32 -03:00
gnss Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
gpib Revert "gpib: cb7210: Fix region leak when request_irq fails" 2026-05-30 12:25:36 +02:00
gpio hwmon updates for v7.2 2026-06-16 08:10:21 +05:30
gpu linux_kselftest-kunit-7.2-rc1 2026-06-16 16:33:57 +05:30
greybus greybus: gb-beagleplay: bound bootloader receive buffering 2026-04-02 15:55:09 +02:00
hid hid-for-linus-2026052801 2026-05-29 08:51:46 -07:00
hsi HSI: omap_ssi_port: remove depends on ARM 2026-04-02 22:33:44 +02:00
hte hte: tegra194: Add Tegra264 GTE support 2026-04-12 23:29:31 -07:00
hv x86/msr updates for v7.2: 2026-06-15 15:08:14 +05:30
hwmon hwmon updates for v7.2 2026-06-16 08:10:21 +05:30
hwspinlock hwspinlock: u8500: delete driver 2026-04-06 09:43:18 -05:00
hwtracing driver core: platform: set mod_name in driver registration 2026-06-08 23:28:24 +02:00
i2c i2c for v7.2 2026-06-16 07:43:29 +05:30
i3c i3c: mipi-i3c-hci: fix IBI payload length calculation for final status 2026-04-12 22:06:02 +02:00
idle x86/msr updates for v7.2: 2026-06-15 15:08:14 +05:30
iio iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw 2026-05-15 12:05:35 +01:00
infiniband RDMA/srp: bound SRP_RSP sense copy by the received length 2026-06-08 13:43:23 -03:00
input Input updates for v7.1-rc6 2026-06-07 08:40:53 -07:00
interconnect This pull request contains the interconnect changes for the 7.1-rc1 2026-04-07 10:06:50 +02:00
iommu Driver core changes for 7.2-rc1 2026-06-15 12:41:17 +05:30
ipack Convert more 'alloc_obj' cases to default GFP_KERNEL arguments 2026-02-21 20:03:00 -08:00
irqchip irqchip/irq-realtek-rtl: Add multicore support 2026-06-05 11:35:10 +02:00
leds leds: class: Make led_remove_lookup() NULL-aware 2026-04-09 13:49:19 +01:00
macintosh sched/cputime: Remove superfluous and error prone kcpustat_field() parameter 2026-06-02 21:27:25 +02:00
mailbox mailbox: mailbox-test: make data_ready a per-instance variable 2026-04-18 13:10:14 -05:00
mcb Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
md md/raid5: avoid R5_Overlap races while breaking stripe batches 2026-06-23 09:44:11 +08:00
media spi: fsl-lpspi: fix DMA termination issues 2026-06-01 15:08:08 +01:00
memory Thermal control updates for 7.2-rc1 2026-06-15 11:35:11 +05:30
memstick memstick: Constify the driver id_table 2026-05-11 16:59:43 +02:00
message Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses 2026-02-22 08:26:33 -08:00
mfd gpio: timberdale: Remove platform data header 2026-05-07 16:25:48 +01:00
misc hardening updates for v7.2-rc1 2026-06-16 09:21:01 +05:30
mmc for-7.2/block-20260615 2026-06-16 13:02:47 +05:30
most most: usb: Use kzalloc_objs for endpoint address array 2026-04-02 17:06:09 +02:00
mtd for-7.2/block-20260615 2026-06-16 13:02:47 +05:30
mux Char/Misc/IIO/and others driver updates for 7.1-rc1 2026-04-24 13:23:50 -07:00
net x86/cpu updates for v7.2: 2026-06-15 15:25:17 +05:30
nfc nfc: nxp-nci: i2c: use rising-edge IRQ on ACPI systems 2026-05-18 18:30:36 +02:00
ntb pci-v7.1-changes 2026-04-15 14:41:21 -07:00
nubus nubus: Switch to dynamic root device 2026-05-18 11:16:19 +02:00
nvdimm nvdimm: Convert nvdimm_bus guard to class 2026-06-03 11:38:47 +02:00
nvme nvme fixes for Linux 7.2 2026-06-23 09:05:44 -06:00
nvmem nvmem: core: fix use-after-free bugs in error paths 2026-06-05 17:18:58 +02:00
of of: dynamic: Fix overlayed devices not probing because of fw_devlink 2026-05-22 13:33:58 +02:00
opp OPP: of: Fix potential memory leak in opp_parse_supplies() 2026-05-20 13:23:37 +05:30
parisc parisc: Fix IRQ leak in LASI driver 2026-05-04 11:48:12 +02:00
parport parport: Fix race between port and client registration 2026-05-22 12:19:02 +02:00
pci Linux 7.1-rc5 2026-05-25 02:40:57 +02:00
pcmcia PCMCIA fixes and cleanups for v7.1 2026-04-23 11:22:16 -07:00
peci Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
perf perf/arm-cmn: Fix DVM node events 2026-06-03 20:50:24 +01:00
phy phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config 2026-05-19 15:42:11 +05:30
pinctrl Revert "pinctrl-amd: enable IRQ for WACF2200 touchscreen on Lenovo Yoga 7 14AGP11" 2026-05-30 00:00:33 +02:00
platform chrome-platform: Updates for v7.2 2026-06-16 07:19:53 +05:30
pmdomain pmdomain: imx: fix OF node refcount 2026-06-03 11:49:37 +02:00
pnp Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
power power sequencing updates for v7.2-rc1 2026-06-16 07:38:04 +05:30
powercap powercap: intel_rapl: Use sysfs_emit() in cpumask_show() 2026-06-01 19:55:32 +02:00
pps pps: generators: Use ktime_get_real_ts64() instead of ktime_get_snapshot() 2026-06-02 11:39:58 +02:00
ps3 Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
ptp Updates for NTP/timekeeping and PTP: 2026-06-15 13:51:27 +05:30
pwm pwm: Changes for v7.2-rc1 2026-06-16 07:26:47 +05:30
rapidio Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
ras - Fix a malformed Kconfig default for the AMD Address Translation Library 2026-06-16 05:31:01 +05:30
regulator regulator: Updates for v7.2 2026-06-16 07:50:31 +05:30
remoteproc rpmsg updates for v7.1 2026-04-17 14:18:55 -07:00
resctrl arm64 updates for 7.2 2026-06-16 05:18:04 +05:30
reset reset: eyeq: drop device_set_of_node_from_dev() done by parent 2026-04-28 19:03:50 -07:00
rpmsg rpmsg: use generic driver_override infrastructure 2026-05-30 22:25:45 +02:00
rtc RTC for 7.1 2026-04-25 16:39:03 -07:00
s390 s390/dasd: Fix undersized format-check buffer 2026-07-31 08:28:08 -06:00
sbus Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
scsi for-7.2/block-20260615 2026-06-16 13:02:47 +05:30
sh Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
siox Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
slimbus slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock 2026-06-05 17:19:51 +02:00
soc Driver core changes for 7.2-rc1 2026-06-15 12:41:17 +05:30
soundwire soundwire updates for 7.1 2026-04-17 10:16:53 -07:00
spi spi: Updates for v7.2 2026-06-16 07:56:47 +05:30
spmi Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
ssb Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
staging spi: Updates for v7.2 2026-06-16 07:56:47 +05:30
target scsi: target: iscsi: Validate CHAP_R length before base64 decode 2026-05-22 23:06:00 -04:00
tc Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
tee QCOMTEE fix for v7.1 2026-05-28 15:31:48 +02:00
thermal x86/cpu updates for v7.2: 2026-06-15 15:25:17 +05:30
thunderbolt thunderbolt: Limit XDomain response copy to actual frame size 2026-05-26 15:18:31 +02:00
tty fbdev fixes & cleanups for 7.2-rc1: 2026-06-16 08:28:41 +05:30
ufs soc: fixes for 7.1, part 2 2026-06-02 10:54:11 -07:00
uio uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory 2026-05-22 12:19:02 +02:00
usb Driver core changes for 7.2-rc1 2026-06-15 12:41:17 +05:30
vdpa vdpa: use generic driver_override infrastructure 2026-04-04 00:47:50 +02:00
vfio vfio/pci: Check BAR resources before exporting a DMABUF 2026-05-14 11:39:03 -06:00
vhost Including fixes from Netfilter. 2026-04-23 16:50:42 -07:00
video fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode 2026-06-12 23:23:43 +02:00
virt * Add TDX module update support 2026-06-16 06:26:12 +05:30
virtio virtio_rtc: Use provided clock ID for history snapshot 2026-06-04 11:04:17 +02:00
w1 w1: ds2490: drop redundant device reference 2026-04-03 10:55:12 +02:00
watchdog watchdog updates and fixes for v7.2 2026-06-16 08:04:24 +05:30
xen x86/cpu updates for v7.2: 2026-06-15 15:25:17 +05:30
zorro zorro: sysfs: Replace sprintf() by sysfs_emit() 2026-04-27 13:52:12 +02:00
Kconfig net: remove ISDN subsystem and Bluetooth CMTP 2026-04-23 10:24:02 -07:00
Makefile net: remove ISDN subsystem and Bluetooth CMTP 2026-04-23 10:24:02 -07:00