Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Ranganath V N ce50039be4 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak ... Fix a KMSAN kernel-infoleak detected by the syzbot . [net?] KMSAN: kernel-infoleak in __skb_datagram_iter In tcf_ife_dump(), the variable 'opt' was partially initialized using a designatied initializer. While the padding bytes are reamined uninitialized. nla_put() copies the entire structure into a netlink message, these uninitialized bytes leaked to userspace. Initialize the structure with memset before assigning its fields to ensure all members and padding are cleared prior to beign copied. This change silences the KMSAN report and prevents potential information leaks from the kernel memory. This fix has been tested and validated by syzbot. This patch closes the bug reported at the following syzkaller link and ensures no infoleak. Reported-by: syzbot+0c85cae3350b7d486aee@syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=0c85cae3350b7d486aee Tested-by: syzbot+0c85cae3350b7d486aee@syzkaller.appspotmail.com Fixes: ef6980b6be ("introduce IFE action") Signed-off-by: Ranganath V N <vnranganath.20@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Link: https://patch.msgid.link/20251109091336.9277-3-vnranganath.20@gmail.com Acked-by: Cong Wang <xiyou.wangcong@gmail.com> Signed-off-by: Paolo Abeni <pabeni@redhat.com>		History 2025-11-11 15:00:08 +01:00
..
6lowpan	net: replace ND_PRINTK with dynamic debug	2025-07-10 15:27:32 -07:00
9p	9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN	2025-09-19 16:34:51 +09:00
802	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
8021q	net: vlan: sync VLAN features with lower device	2025-10-31 17:42:35 -07:00
appletalk	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-24 11:10:46 -07:00
atm	net: atm: fix memory leak in atm_register_sysfs when device_register fail	2025-09-04 09:53:44 +02:00
ax25	ax25: properly unshare skbs in ax25_kiss_rcv()	2025-09-03 17:06:30 -07:00
batman-adv	Here is a batman-adv bugfix:	2025-10-27 18:00:54 -07:00
bluetooth	Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()	2025-10-31 12:43:05 -04:00
bpf	bpf: Do not disable preemption in bpf_test_run().	2025-10-17 11:29:35 -07:00
bridge	net: bridge: fix MST static key usage	2025-11-06 07:32:17 -08:00
caif	caif: Replace memset(0) + strscpy() with strscpy_pad()	2025-08-12 14:08:56 -07:00
can	can: j1939: add missing calls in NETDEV_UNREGISTER notification handler	2025-10-13 21:26:31 +02:00
ceph	Some messenger improvements from Eric and Max, a patch to address the	2025-10-10 11:30:19 -07:00
core	net: netpoll: fix incorrect refcount handling causing incorrect cleanup	2025-11-10 18:34:44 -08:00
dcb	Revert "Documentation: net: add flow control guide and document ethtool API"	2025-10-01 09:48:21 +02:00
devlink	net: replace use of system_wq with system_percpu_wq	2025-09-22 17:40:30 -07:00
dns_resolver	Networking changes for 6.8.	2024-01-11 10:07:29 -08:00
dsa	net: dsa: tag_brcm: do not mark link local traffic as offloaded	2025-11-10 17:04:19 -08:00
ethernet	ethernet: Extend device_get_mac_address() to use NVMEM	2025-09-15 18:34:08 -07:00
ethtool	Revert "Documentation: net: add flow control guide and document ethtool API"	2025-10-01 09:48:21 +02:00
handshake	net/handshake: Fix memory leak in tls_handshake_accept()	2025-11-10 17:53:47 -08:00
hsr	net: hsr: prevent creation of HSR device with slaves from another netns	2025-10-22 19:22:22 -07:00
ieee802154	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
ife	net: sched: ife: fix potential use-after-free	2023-12-15 10:50:18 +00:00
ipv4	tcp: fix too slow tcp_rcvbuf_grow() action	2025-10-29 17:30:19 -07:00
ipv6	net/ip6_tunnel: Prevent perpetual tunnel growth	2025-10-13 17:43:46 -07:00
iucv	net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers	2025-08-28 13:14:50 +02:00
kcm	net: kcm: Fix race condition in kcm_unattach()	2025-08-13 18:18:33 -07:00
key	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-07-24 11:10:46 -07:00
l2tp	l2tp: do not use sock_hold() in pppol2tp_session_get_sock()	2025-08-27 17:16:13 -07:00
l3mdev	net: fib_rules: Fix iif / oif matching on L3 master device	2025-04-15 17:54:56 -07:00
lapb	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
llc	net: make sk->sk_rcvtimeo lockless	2025-06-23 17:05:12 -07:00
mac80211	wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work	2025-10-28 14:56:42 +01:00
mac802154	mac802154: Switch to use hrtimer_setup()	2025-02-18 10:35:44 +01:00
mctp	net: mctp: fix typo in comment	2025-09-08 17:47:57 -07:00
mpls	net: s/dev_get_flags/netif_get_flags/	2025-07-18 17:27:47 -07:00
mptcp	mptcp: zero window probe mib	2025-10-29 17:44:28 -07:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-06-12 18:21:59 -07:00
netfilter	netfilter: nft_ct: add seqadj extension for natted connections	2025-10-29 14:47:59 +01:00
netlabel	audit: add record for multiple task security contexts	2025-08-30 10:15:30 -04:00
netlink	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-09-11 17:40:13 -07:00
netrom	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
nfc	net: nfc: nci: Add parameter validation for packet data	2025-09-30 10:27:14 +02:00
nsh	nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().	2024-04-26 12:20:01 +02:00
openvswitch	net: replace use of system_wq with system_percpu_wq	2025-09-22 17:40:30 -07:00
packet	net: af_packet: Use hrtimer to do the retire operation	2025-09-11 18:40:06 -07:00
phonet	net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers	2025-08-28 13:14:50 +02:00
psample	psample: adjust size if rate_as_probability is set	2024-12-18 19:23:04 -08:00
psp	net: psp: don't assume reply skbs will have a socket	2025-10-03 10:23:50 -07:00
qrtr	net: qrtr: Update packets cloning when broadcasting	2024-09-24 10:48:16 +02:00
rds	net: WQ_PERCPU added to alloc_workqueue users	2025-09-22 17:40:30 -07:00
rfkill	net: replace use of system_wq with system_percpu_wq	2025-09-22 17:40:30 -07:00
rose	net: rose: fix a typo in rose_clear_routes()	2025-08-27 17:27:52 -07:00
rxrpc	net: WQ_PERCPU added to alloc_workqueue users	2025-09-22 17:40:30 -07:00
sched	net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak	2025-11-11 15:00:08 +01:00
sctp	sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto	2025-11-10 16:21:05 -08:00
shaper	net: add netdev_lock() / netdev_unlock() helpers	2025-01-15 19:13:33 -08:00
smc	net/smc: fix mismatch between CLC header and proposal	2025-11-10 17:52:09 -08:00
strparser	strparser: Fix signed/unsigned mismatch bug	2025-11-07 18:17:16 -08:00
sunrpc	NFSD 6.18 Release Notes	2025-10-06 13:22:21 -07:00
switchdev	net: switchdev: Convert blocking notification chain to a raw one	2025-03-11 11:30:28 +01:00
tipc	tipc: Fix use-after-free in tipc_mon_reinit_self().	2025-11-10 18:14:40 -08:00
tls	net: tls: Cancel RX async resync request on rcd_delta overflow	2025-10-29 18:32:18 -07:00
unix	af_unix: Initialise scc_index in unix_add_edge().	2025-11-11 13:42:33 +01:00
vmw_vsock	vsock: fix lock inversion in vsock_assign_transport()	2025-10-23 16:07:58 +02:00
wireless	wifi: cfg80211: add an hrtimer based delayed work item	2025-10-28 14:56:30 +01:00
x25	net/x25: Remove unused x25_terminate_link()	2025-07-14 17:19:13 -07:00
xdp	xsk: Harden userspace-supplied xdp_desc validation	2025-10-10 10:07:48 -07:00
xfrm	espintcp: use datagram_poll_queue for socket readiness	2025-10-23 15:46:04 +02:00
compat.c	file: stop exposing receive_fd_user()	2023-12-12 14:24:14 +01:00
devres.c	net: devres: Correct a grammatical error	2021-06-11 12:55:28 -07:00
Kconfig	dibs: Create drivers/dibs	2025-09-23 11:13:21 +02:00
Kconfig.debug	rtnetlink: Add per-netns RTNL.	2024-10-08 15:16:59 +02:00
Makefile	psp: base PSP device support	2025-09-18 12:32:06 +02:00
socket.c	Networking changes for 6.18.	2025-10-02 15:17:01 -07:00
sysctl_net.c	sysctl: Remove check for sentinel element in ctl_table arrays	2024-06-13 10:50:52 +02:00