Reference in a new issue

Blame

Copy permalink

Reference in a new issue

Copy permalink

Kuniyuki Iwashima f09cd20935 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). ... commit c65f27b9c3 upstream. get_netdev_for_sock() is called during setsockopt(), so not under RCU. Using sk_dst_get(sk)->dev could trigger UAF. Let's use __sk_dst_get() and dst_dev_rcu(). Note that the only ->ndo_sk_get_lower_dev() user is bond_sk_get_lower_dev(), which uses RCU. Fixes: e8f6979981 ("net/tls: Add generic NIC offload infrastructure") Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Reviewed-by: Sabrina Dubroca <sd@queasysnail.net> Link: https://patch.msgid.link/20250916214758.650211-6-kuniyu@google.com Signed-off-by: Jakub Kicinski <kuba@kernel.org> [ Keerthana: Backport to v6.12.y ] Signed-off-by: Keerthana K <keerthana.kalyanasundaram@broadcom.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		History 2026-01-17 16:31:18 +01:00
..
Kconfig	net: skbuff: generalize the skb->decrypted bit	2024-04-06 17:34:31 +01:00
Makefile	tls: rx: async: hold onto the input skb	2022-07-18 11:24:11 +01:00
tls.h	tls: make sure to abort the stream if headers are bogus	2025-09-25 11:13:44 +02:00
tls_device.c	tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().	2026-01-17 16:31:18 +01:00
tls_device_fallback.c	Revert "net: mirror skb frag ref/unref helpers"	2024-05-03 16:05:53 -07:00
tls_main.c	tls: always set record_type in tls_process_cmsg	2025-10-23 16:20:31 +02:00
tls_proc.c	tls: rx: add counter for NoPad violations	2022-07-11 19:48:33 -07:00
tls_strp.c	tls: make sure to abort the stream if headers are bogus	2025-09-25 11:13:44 +02:00
tls_sw.c	tls: don't rely on tx_work during send()	2025-10-23 16:20:31 +02:00
tls_toe.c	tls: create an internal header	2022-07-08 18:38:45 -07:00
trace.c	net/tls: add tracing for device/offload events	2019-10-05 16:29:00 -07:00
trace.h	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00