github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-10-29 21:06:02 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph
cabc249e65
linux/drivers/block/drbd
History
Christoph Böhmwalder c71bf113df drbd: don't leak the shared secret to unprivileged netlink dumps 
The conversion to explicit netlink serialization dropped the
exclude_sensitive parameter from net_conf_to_skb(), so each caller has
to sanitize by hand. Two dump paths were missed:
drbd_nl_get_connections_dumpit() and the volume-less connection branch
of get_one_status(). Neither op carries GENL_ADMIN_PERM, so any
unprivileged local user could read the CRAM-HMAC secret.

Add a net_conf_to_skb_sanitized() wrapper and route all three callers
through it.

Fixes: 8098eeb693 ("drbd: replace genl_magic with explicit netlink serialization")
Reported-by: Vivek Parikh <vivek.parikh@breachx.ai>
Signed-off-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com>
Link: https://patch.msgid.link/20260814151617.73752-1-christoph.boehmwalder@linbit.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
2026-08-15 20:00:10 -06:00
..
drbd_actlog.c drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() 2026-02-19 08:21:53 -07:00
drbd_bitmap.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
drbd_buildtag.c drbd: move UAPI headers to include/uapi/linux/ 2026-05-08 19:23:23 -06:00
drbd_config.h drbd: move UAPI headers to include/uapi/linux/ 2026-05-08 19:23:23 -06:00
drbd_debugfs.c drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_debugfs.h drbd: use consistent license 2022-11-22 19:38:39 -07:00
drbd_int.h drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_interval.c drbd: drbd_insert_interval(): Clarify comment 2023-01-29 15:18:33 -07:00
drbd_interval.h drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() 2026-02-19 08:21:53 -07:00
drbd_main.c drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_nl_gen.c drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_nl_gen.h drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_nl.c drbd: don't leak the shared secret to unprivileged netlink dumps 2026-08-15 20:00:10 -06:00
drbd_polymorph_printk.h drbd: add context parameter to expect() macro 2022-12-01 11:33:49 -07:00
drbd_proc.c drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00
drbd_protocol.h drbd: use consistent license 2022-11-22 19:38:39 -07:00
drbd_receiver.c drbd: reject data replies with an out-of-range payload size 2026-07-10 06:49:11 -06:00
drbd_req.c drbd: fix null-pointer dereference on local read error 2026-02-20 07:09:06 -07:00
drbd_req.h drbd: pass drbd_peer_device to __req_mod 2023-04-01 20:27:55 -06:00
drbd_state_change.h drbd: fix function cast warnings in state machine 2024-02-13 08:55:40 -07:00
drbd_state.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
drbd_state.h drbd: use consistent license 2022-11-22 19:38:39 -07:00
drbd_strings.c drbd: use consistent license 2022-11-22 19:38:39 -07:00
drbd_strings.h drbd: use consistent license 2022-11-22 19:38:39 -07:00
drbd_vli.h drbd: remove unnecessary assignment in vli_encode_bits 2023-01-29 15:18:33 -07:00
drbd_worker.c treewide: Replace kmalloc with kmalloc_obj for non-scalar types 2026-02-21 01:02:28 -08:00
Kconfig lib/crc: remove CONFIG_LIBCRC32C 2025-04-04 11:31:42 -07:00
Makefile drbd: replace genl_magic with explicit netlink serialization 2026-05-08 19:23:23 -06:00