Zhiling Zou 3f118c8217 openvswitch: avoid reallocating confirmed conntrack labels ... ovs_ct_get_conn_labels() adds the labels extension when a conntrack entry does not have one. Confirmed conntracks can be read locklessly, so adding an extension may reallocate and free the extension block while another CPU accesses it. Only add the extension for unconfirmed conntracks. A confirmed conntrack without labels now fails the caller's label operation instead of reallocating its extension storage. Fixes: c2ac667358 ("openvswitch: Allow matching on conntrack label") Cc: stable@vger.kernel.org Reported-by: Vega <vega@nebusec.ai> Signed-off-by: Zhiling Zou <zhilinz@nebusec.ai> Reviewed-by: Ilya Maximets <i.maximets@ovn.org> Reviewed-by: Aaron Conole <aconole@redhat.com> Link: https://patch.msgid.link/372fbb062b40ae6723684f55484be86ff0064f8e.1789218015.git.zhilinz@nebusec.ai Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2026-09-15 18:00:46 -07:00
..
actions.c
conntrack.c	openvswitch: avoid reallocating confirmed conntrack labels	2026-09-15 18:00:46 -07:00
conntrack.h	openvswitch: Fix CT limit teardown use-after-free	2026-08-24 11:38:09 -07:00
datapath.c	openvswitch: only skb_tx_error() a packet we are about to drop	2026-08-25 09:36:47 +02:00
datapath.h	openvswitch: Fix CT limit teardown use-after-free	2026-08-24 11:38:09 -07:00
dp_notify.c
drop.h
flow_netlink.c
flow_netlink.h
flow_table.c	net: openvswitch: fix use-after-free of the flow table mask array	2026-09-08 17:24:10 -07:00
flow_table.h
flow.c	openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()	2026-09-10 08:51:30 -07:00
flow.h
Kconfig
Makefile
meter.c
meter.h
openvswitch_trace.c
openvswitch_trace.h
vport-internal_dev.c
vport-internal_dev.h
vport-netdev.c
vport-netdev.h
vport.c
vport.h