| Message ID | 20181018.171914.1210096727703399564.davem@davemloft.net |
|---|---|
| State | Accepted, archived |
| Delegated to: | David Miller |
| Headers | show |
| Series | [GIT] Networking | expand |
On Thu, Oct 18, 2018 at 05:19:14PM -0700, David Miller wrote: > > 1) Fix gro_cells leak in xfrm layer, from Li RongQing. > > 2) BPF selftests change RLIMIT_MEMLOCK blindly, don't do that. > From Eric Dumazet. > > 3) AF_XDP calls synchronize_net() under RCU lock, fix from Björn > Töpel. > > 4) Out of bounds packet access in _decode_session6(), from Alexei > Starovoitov. > > 5) Several ethtool bugs, where we copy a struct into the kernel > twice and our validations of the values in the first copy can > be invalidated by the second copy due to asynchronous updates > to the memory by the user. From Wenwen Wang. > > 6) Missing netlink attribute validation in cls_api, from Davide > Caratti. > > 7) LLC SAP sockets neet to be SOCK_RCU FREE, from Cong Wang. > > 8) rxrpc operates on wrong kvec, from Yue Haibing. > > 9) A regression was introduced by the disassosciation of route > neighbour references in rt6_probe(), causing probe for > neighbourless routes to not be properly rate limited. Fix > from Sabrina Dubroca. > > 10) Unsafe RCU locking in tipc, from Tung Nguyen. > > 11) Use after free in inet6_mc_check(), from Eric Dumazet. > > 12) PMTU from icmp packets should update the SCTP transport > pathmtu, from Xin Long. > > 13) Missing peer put on error in rxrpc, from David Howells. > > 14) Fix pedit in nfp driver, from Pieter Jansen van Vuuren. > > 15) Fix overflowing shift statement in qla3xxx driver, from Nathan > Chancellor. > > 16) Fix Spectre v1 in ptp code, from Gustavo A. R. Silva. > > 17) udp6_unicast_rcv_skb() interprets udpv6_queue_rcv_skb() return > value in an inverted manner, fix from Paolo Abeni. > > 18) Fix missed unresolved entries in ipmr dumps, from Nikolay > Aleksandrov. > > 19) Fix NAPI handling under high load, we can completely miss events > when NAPI has to loop more than one time in a cycle. From Heiner > Kallweit. > > Please pull, thanks a lot! > > The following changes since commit bab5c80b211035739997ebd361a679fa85b39465: > > Merge tag 'armsoc-fixes-4.19' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc (2018-10-12 17:41:27 +0200) > > are available in the Git repository at: > > git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git Now merged, thanks. greg k-h
1) Fix gro_cells leak in xfrm layer, from Li RongQing. 2) BPF selftests change RLIMIT_MEMLOCK blindly, don't do that. From Eric Dumazet. 3) AF_XDP calls synchronize_net() under RCU lock, fix from Björn Töpel. 4) Out of bounds packet access in _decode_session6(), from Alexei Starovoitov. 5) Several ethtool bugs, where we copy a struct into the kernel twice and our validations of the values in the first copy can be invalidated by the second copy due to asynchronous updates to the memory by the user. From Wenwen Wang. 6) Missing netlink attribute validation in cls_api, from Davide Caratti. 7) LLC SAP sockets neet to be SOCK_RCU FREE, from Cong Wang. 8) rxrpc operates on wrong kvec, from Yue Haibing. 9) A regression was introduced by the disassosciation of route neighbour references in rt6_probe(), causing probe for neighbourless routes to not be properly rate limited. Fix from Sabrina Dubroca. 10) Unsafe RCU locking in tipc, from Tung Nguyen. 11) Use after free in inet6_mc_check(), from Eric Dumazet. 12) PMTU from icmp packets should update the SCTP transport pathmtu, from Xin Long. 13) Missing peer put on error in rxrpc, from David Howells. 14) Fix pedit in nfp driver, from Pieter Jansen van Vuuren. 15) Fix overflowing shift statement in qla3xxx driver, from Nathan Chancellor. 16) Fix Spectre v1 in ptp code, from Gustavo A. R. Silva. 17) udp6_unicast_rcv_skb() interprets udpv6_queue_rcv_skb() return value in an inverted manner, fix from Paolo Abeni. 18) Fix missed unresolved entries in ipmr dumps, from Nikolay Aleksandrov. 19) Fix NAPI handling under high load, we can completely miss events when NAPI has to loop more than one time in a cycle. From Heiner Kallweit. Please pull, thanks a lot! The following changes since commit bab5c80b211035739997ebd361a679fa85b39465: Merge tag 'armsoc-fixes-4.19' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc (2018-10-12 17:41:27 +0200) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git for you to fetch changes up to d4d576f5ab7edcb757bb33e6a5600666a0b1232d: ip6_tunnel: Fix encapsulation layout (2018-10-18 16:54:40 -0700) ---------------------------------------------------------------- Ake Koomsin (1): virtio_net: avoid using netif_tx_disable() for serializing tx routine Alexei Starovoitov (1): net/xfrm: fix out-of-bounds packet access Björn Töpel (1): xsk: do not call synchronize_net() under RCU read lock Colin Ian King (1): qed: fix spelling mistake "Ireelevant" -> "Irrelevant" Cong Wang (1): llc: set SOCK_RCU_FREE in llc_sap_add_socket() David Howells (3): rxrpc: Fix an uninitialised variable rxrpc: Fix incorrect conditional on IPV6 rxrpc: Fix a missing rxrpc_put_peer() in the error_report handler David S. Miller (5): Merge git://git.kernel.org/.../bpf/bpf Merge tag 'mlx5-fixes-2018-10-10' of git://git.kernel.org/.../saeed/linux Merge branch 'nfp-fix-pedit-set-action-offloads' Merge branch 'geneve-vxlan-mtu' Merge branch 'master' of git://git.kernel.org/.../klassert/ipsec Davide Caratti (1): net/sched: cls_api: add missing validation of netlink attributes Eric Dumazet (2): bpf: do not blindly change rlimit in reuseport net selftest ipv6: mcast: fix a use-after-free in inet6_mc_check Florian Fainelli (1): net: bcmgenet: Poll internal PHY for GENETv5 Florian Westphal (1): xfrm: policy: use hlist rcu variants on insert Fugang Duan (1): net: fec: don't dump RX FIFO register when not available Gregory CLEMENT (1): net: mscc: ocelot: Fix comment in ocelot_vlant_wait_for_completion() Gustavo A. R. Silva (1): ptp: fix Spectre v1 vulnerability Heiner Kallweit (2): r8169: re-enable MSI-X on RTL8168g r8169: fix NAPI handling under high load Huy Nguyen (1): net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type Ido Schimmel (1): mlxsw: core: Fix use-after-free when flashing firmware during init Jian-Hong Pan (1): r8169: Enable MSI-X on RTL8106e Jon Maloy (2): tipc: initialize broadcast link stale counter correctly tipc: fix info leak from kernel tipc_event Li RongQing (1): xfrm: fix gro_cells leak when remove virtual xfrm interfaces Marcelo Ricardo Leitner (1): sctp: fix race on sctp_id2asoc Nathan Chancellor (1): net: qla3xxx: Remove overflowing shift statement Nikolay Aleksandrov (1): net: ipmr: fix unresolved entry dumps Paolo Abeni (1): udp6: fix encap return code for resubmitting Phil Sutter (1): net: sched: Fix for duplicate class dump Pieter Jansen van Vuuren (3): nfp: flower: fix pedit set actions for multiple partial masks nfp: flower: fix multiple keys per pedit action nfp: flower: use offsets provided by pedit instead of index for ipv6 Sabrina Dubroca (1): ipv6: rate-limit probes for neighbourless routes Stefano Brivio (3): geneve, vxlan: Don't check skb_dst() twice geneve, vxlan: Don't set exceptions if skb->len < mtu ip6_tunnel: Fix encapsulation layout Steffen Klassert (1): MAINTAINERS: Remove net/core/flow.c Taehee Yoo (1): net: bpfilter: use get_pid_task instead of pid_task Talat Batheesh (1): net/mlx5: Fix memory leak when setting fpga ipsec caps Tariq Toukan (1): net/mlx5: WQ, fixes for fragmented WQ buffers API Tung Nguyen (1): tipc: fix unsafe rcu locking when accessing publication list Wenwen Wang (3): ethtool: fix a missing-check bug ethtool: fix a privilege escalation bug net: socket: fix a missing-check bug Xin Long (4): sctp: use the pmtu from the icmp packet to update transport pathmtu sctp: get pr_assoc and pr_stream all status with SCTP_PR_SCTP_ALL instead sctp: not free the new asoc when sctp_wait_for_connect returns err sctp: fix the data size calculation in sctp_data_size YueHaibing (1): rxrpc: use correct kvec num when sending BUSY response packet MAINTAINERS | 1 - drivers/net/ethernet/broadcom/genet/bcmmii.c | 7 +++++-- drivers/net/ethernet/freescale/fec.h | 4 ++++ drivers/net/ethernet/freescale/fec_main.c | 16 ++++++++++++---- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 12 +++++------- drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 22 +++++++++++----------- drivers/net/ethernet/mellanox/mlx5/core/eq.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/fpga/ipsec.c | 9 ++++----- drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.h | 5 ++--- drivers/net/ethernet/mellanox/mlx5/core/wq.c | 5 ----- drivers/net/ethernet/mellanox/mlx5/core/wq.h | 11 +++++------ drivers/net/ethernet/mellanox/mlxsw/core.c | 2 ++ drivers/net/ethernet/mellanox/mlxsw/core.h | 4 ++++ drivers/net/ethernet/mellanox/mlxsw/core_hwmon.c | 17 +++++++++++------ drivers/net/ethernet/mscc/ocelot.c | 6 +++--- drivers/net/ethernet/netronome/nfp/flower/action.c | 51 +++++++++++++++++++++++++++++++++------------------ drivers/net/ethernet/qlogic/qed/qed_int.c | 2 +- drivers/net/ethernet/qlogic/qla3xxx.c | 2 -- drivers/net/ethernet/realtek/r8169.c | 20 +++++--------------- drivers/net/geneve.c | 14 +++----------- drivers/net/virtio_net.c | 5 ++++- drivers/net/vxlan.c | 12 ++---------- drivers/ptp/ptp_chardev.c | 4 ++++ include/linux/mlx5/driver.h | 8 ++++++++ include/net/dst.h | 10 ++++++++++ include/net/ip6_fib.h | 4 ++++ include/net/sctp/sm.h | 2 +- include/net/sctp/structs.h | 2 ++ include/uapi/linux/sctp.h | 1 + kernel/bpf/xskmap.c | 10 ++-------- net/bpfilter/bpfilter_kern.c | 6 ++++-- net/core/ethtool.c | 11 +++++++++-- net/ipv4/ipmr_base.c | 2 -- net/ipv6/ip6_tunnel.c | 10 +++++----- net/ipv6/mcast.c | 16 ++++++++-------- net/ipv6/route.c | 12 ++++++------ net/ipv6/udp.c | 6 ++---- net/ipv6/xfrm6_policy.c | 4 ++-- net/llc/llc_conn.c | 1 + net/rxrpc/call_accept.c | 2 +- net/rxrpc/local_object.c | 2 +- net/rxrpc/output.c | 3 ++- net/rxrpc/peer_event.c | 1 + net/sched/cls_api.c | 13 ++++++++----- net/sched/sch_api.c | 11 ++++++----- net/sctp/associola.c | 3 ++- net/sctp/input.c | 1 + net/sctp/output.c | 6 ++++++ net/sctp/socket.c | 17 +++++++++-------- net/socket.c | 11 ++++++++--- net/tipc/group.c | 1 + net/tipc/link.c | 1 + net/tipc/name_distr.c | 4 ++-- net/xdp/xsk.c | 2 ++ net/xfrm/xfrm_interface.c | 3 +++ net/xfrm/xfrm_policy.c | 8 ++++---- tools/testing/selftests/net/reuseport_bpf.c | 13 +++++++++---- 57 files changed, 253 insertions(+), 187 deletions(-)