linux

mirror of https://github.com/torvalds/linux.git synced 2026-06-05 13:06:59 +02:00

Linux kernel source tree

Go to file

Alexander Potapenko a033b86c7f ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network [ Upstream commit `c23fb2c822` ] When copying a `struct ifaddrlblmsg` to the network, __ifal_reserved remained uninitialized, resulting in a 1-byte infoleak: BUG: KMSAN: kernel-network-infoleak in __netdev_start_xmit ./include/linux/netdevice.h:4841 __netdev_start_xmit ./include/linux/netdevice.h:4841 netdev_start_xmit ./include/linux/netdevice.h:4857 xmit_one net/core/dev.c:3590 dev_hard_start_xmit+0x1dc/0x800 net/core/dev.c:3606 __dev_queue_xmit+0x17e8/0x4350 net/core/dev.c:4256 dev_queue_xmit ./include/linux/netdevice.h:3009 __netlink_deliver_tap_skb net/netlink/af_netlink.c:307 __netlink_deliver_tap+0x728/0xad0 net/netlink/af_netlink.c:325 netlink_deliver_tap net/netlink/af_netlink.c:338 __netlink_sendskb net/netlink/af_netlink.c:1263 netlink_sendskb+0x1d9/0x200 net/netlink/af_netlink.c:1272 netlink_unicast+0x56d/0xf50 net/netlink/af_netlink.c:1360 nlmsg_unicast ./include/net/netlink.h:1061 rtnl_unicast+0x5a/0x80 net/core/rtnetlink.c:758 ip6addrlbl_get+0xfad/0x10f0 net/ipv6/addrlabel.c:628 rtnetlink_rcv_msg+0xb33/0x1570 net/core/rtnetlink.c:6082 ... Uninit was created at: slab_post_alloc_hook+0x118/0xb00 mm/slab.h:742 slab_alloc_node mm/slub.c:3398 __kmem_cache_alloc_node+0x4f2/0x930 mm/slub.c:3437 __do_kmalloc_node mm/slab_common.c:954 __kmalloc_node_track_caller+0x117/0x3d0 mm/slab_common.c:975 kmalloc_reserve net/core/skbuff.c:437 __alloc_skb+0x27a/0xab0 net/core/skbuff.c:509 alloc_skb ./include/linux/skbuff.h:1267 nlmsg_new ./include/net/netlink.h:964 ip6addrlbl_get+0x490/0x10f0 net/ipv6/addrlabel.c:608 rtnetlink_rcv_msg+0xb33/0x1570 net/core/rtnetlink.c:6082 netlink_rcv_skb+0x299/0x550 net/netlink/af_netlink.c:2540 rtnetlink_rcv+0x26/0x30 net/core/rtnetlink.c:6109 netlink_unicast_kernel net/netlink/af_netlink.c:1319 netlink_unicast+0x9ab/0xf50 net/netlink/af_netlink.c:1345 netlink_sendmsg+0xebc/0x10f0 net/netlink/af_netlink.c:1921 ... This patch ensures that the reserved field is always initialized. Reported-by: syzbot+3553517af6020c4f2813f1003fe76ef3cbffe98d@syzkaller.appspotmail.com Fixes: `2a8cc6c890` ("[IPV6] ADDRCONF: Support RFC3484 configurable address selection policy table.") Signed-off-by: Alexander Potapenko <glider@google.com> Reviewed-by: David Ahern <dsahern@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-11-16 09:57:11 +01:00
arch	KVM: s390: pv: don't allow userspace to set the clock under PV	2022-11-16 09:57:10 +01:00
block	block, bfq: protect 'bfqd->queued' by 'bfqd->lock'	2022-11-10 18:14:24 +01:00
certs	certs/blacklist_hashes.c: fix const confusion in certs blacklist	2022-06-22 14:13:17 +02:00
crypto	crypto: akcipher - default implementation for setting a private key	2022-10-26 13:25:42 +02:00
Documentation	KVM: s390: pv: don't allow userspace to set the clock under PV	2022-11-16 09:57:10 +01:00
drivers	drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()	2022-11-16 09:57:11 +01:00
fs	fuse: fix readdir cache race	2022-11-16 09:57:07 +01:00
include	capabilities: fix undefined behavior in bit shift for CAP_TO_MASK	2022-11-16 09:57:10 +01:00
init	Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug	2022-06-09 10:21:25 +02:00
ipc	ipc: remove memcg accounting for sops objects in do_semtimedop()	2022-11-10 18:14:29 +01:00
kernel	bpf: Fix wrong reg type conversion in release_reference()	2022-11-16 09:57:09 +01:00
lib	dyndbg: drop EXPORTed dynamic_debug_exec_queries	2022-10-26 13:25:34 +02:00
LICENSES
mm	mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages	2022-11-03 23:57:50 +09:00
net	ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network	2022-11-16 09:57:11 +01:00
samples	x86: Prepare inline-asm for straight-line-speculation	2022-07-25 11:26:29 +02:00
scripts	kbuild: Add skip_encoding_btf_enum64 option to pahole	2022-10-28 12:57:12 +02:00
security	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-11-10 18:14:26 +01:00
sound	ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices	2022-11-10 18:14:24 +01:00
tools	bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE	2022-11-16 09:57:08 +01:00
usr
virt	kvm: Add support for arch compat vm ioctls	2022-10-30 09:41:15 +01:00
.clang-format
.cocciconfig
.get_maintainer.ignore
.gitattributes
.gitignore
.mailmap
COPYING
CREDITS
Kbuild
Kconfig
MAINTAINERS	MAINTAINERS: add Amir as xfs maintainer for 5.10.y	2022-07-02 16:39:22 +02:00
Makefile	Linux 5.10.154	2022-11-10 18:14:30 +01:00
README

README

Linux kernel
============

There are several guides for kernel developers and users. These guides can
be rendered in a number of formats, like HTML and PDF. Please read
Documentation/admin-guide/README.rst first.

In order to build the documentation, use ``make htmldocs`` or
``make pdfdocs``.  The formatted documentation can also be read online at:

    https://www.kernel.org/doc/html/latest/

There are various text files in the Documentation/ subdirectory,
several of them using the Restructured Text markup notation.

Please read the Documentation/process/changes.rst file, as it contains the
requirements for building and running the kernel, and information about
the problems which may result by upgrading your kernel.