Benedict Wong f6d2aa322c xfrm: Check if_id in inbound policy/secpath match ... [ Upstream commit 8680407b6f8f5fba59e8f1d63c869abc280f04df ] This change ensures that if configured in the policy, the if_id set in the policy and secpath states match during the inbound policy check. Without this, there is potential for ambiguity where entries in the secpath differing by only the if_id could be mismatched. Notably, this is checked in the outbound direction when resolving templates to SAs, but not on the inbound path when matching SAs and policies. Test: Tested against Android kernel unit tests & CTS Signed-off-by: Benedict Wong <benedictwong@google.com> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-06-09 10:34:10 +02:00
..
6lowpan
9p	9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition	2023-04-20 12:35:08 +02:00
802	mrp: introduce active flags to prevent UAF when applicant uninit	2022-12-31 13:33:02 +01:00
8021q	vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()	2023-05-24 17:32:47 +01:00
appletalk
atm	net/atm: fix proc_mpc_write incorrect return value	2022-10-15 11:08:36 +01:00
ax25
batman-adv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-09-22 13:02:10 -07:00
bluetooth	bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()	2023-06-05 09:26:21 +02:00
bpf	Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"	2023-03-17 08:50:32 +01:00
bpfilter
bridge	bridge: always declare tunnel functions	2023-05-24 17:32:48 +01:00
caif	net: caif: Fix use-after-free in cfusbl_device_notify()	2023-03-17 08:50:24 +01:00
can	can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag	2023-05-24 17:32:49 +01:00
ceph	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
core	rtnetlink: call validate_linkmsg in rtnl_create_link	2023-06-09 10:34:05 +02:00
dcb
dccp	netfilter: keep conntrack reference until IPsecv6 policy checks are done	2023-05-11 23:03:18 +09:00
dns_resolver
dsa	net: dsa: tag_brcm: legacy: fix daisy-chained switches	2023-03-30 12:49:09 +02:00
ethernet
ethtool	ethtool: Fix uninitialized number of lanes	2023-05-17 11:53:37 +02:00
hsr	hsr: ratelimit only when errors are printed	2023-04-06 12:10:58 +02:00
ieee802154	net: ieee802154: fix error return code in dgram_bind()	2022-10-07 09:29:17 +02:00
ife
ipv4	tcp: fix mishandling when the sack compression is deferred.	2023-06-09 10:34:05 +02:00
ipv6	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 09:26:16 +02:00
iucv	net/iucv: Fix size of interrupt data	2023-03-22 13:33:50 +01:00
kcm	kcm: close race conditions on sk_receive_queue	2022-11-15 12:42:26 +01:00
key	af_key: Reject optional tunnel/BEET mode templates in outbound policies	2023-05-24 17:32:43 +01:00
l2tp	inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().	2023-04-26 14:28:43 +02:00
l3mdev
lapb
llc	net: deal with most data-races in sk_wait_event()	2023-05-24 17:32:32 +01:00
mac80211	wifi: mac80211: Abort running color change when stopping the AP	2023-05-24 17:32:46 +01:00
mac802154	mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()	2022-12-05 09:53:08 +01:00
mctp	net: mctp: purge receive queues on sk destruction	2023-02-06 08:06:34 +01:00
mpls	net: mpls: fix stale pointer if allocation fails during device rename	2023-02-22 12:59:53 +01:00
mptcp	mptcp: add annotations around sk->sk_shutdown accesses	2023-06-09 10:34:06 +02:00
ncsi	net/ncsi: clear Tx enable mode when handling a Config required AEN	2023-05-17 11:53:32 +02:00
netfilter	netfilter: ctnetlink: Support offloaded conntrack entry deletion	2023-06-05 09:26:22 +02:00
netlabel
netlink	net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report	2023-06-09 10:34:03 +02:00
netrom	netrom: fix info-leak in nr_write_internal()	2023-06-09 10:34:01 +02:00
nfc	nfc: change order inside nfc_se_io error path	2023-03-17 08:50:17 +01:00
nsh	net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()	2023-05-24 17:32:45 +01:00
openvswitch	net: openvswitch: fix race on port output	2023-04-20 12:35:09 +02:00
packet	af_packet: do not use READ_ONCE() in packet_bind()	2023-06-09 10:34:02 +02:00
phonet
psample
qrtr	net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()	2023-04-20 12:35:09 +02:00
rds	rds: rds_rm_zerocopy_callback() correct order for list_add_tail()	2023-03-10 09:33:02 +01:00
rfkill
rose	net/rose: Fix to not accept on connected socket	2023-02-22 12:59:42 +01:00
rxrpc	rxrpc: Fix hard call timeout units	2023-05-17 11:53:35 +02:00
sched	net/sched: flower: fix possible OOB write in fl_set_geneve_opt()	2023-06-09 10:34:04 +02:00
sctp	inet: Add IP_LOCAL_PORT_RANGE socket option	2023-06-05 09:26:16 +02:00
smc	net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK	2023-06-09 10:34:03 +02:00
strparser
sunrpc	nfsd: fix double fget() bug in __write_ports_addfd()	2023-06-09 10:34:04 +02:00
switchdev
tipc	tipc: check the bearer min mtu properly when setting it by netlink	2023-05-24 17:32:46 +01:00
tls	tls: improve lockless access safety of tls_err_abort()	2023-06-09 10:34:01 +02:00
unix	bpf, sockmap: Pass skb ownership through read_skb	2023-06-05 09:26:18 +02:00
vmw_vsock	vsock: avoid to close connected socket after the timeout	2023-05-24 17:32:44 +01:00
wireless	wifi: cfg80211: Drop entries with invalid BSSIDs in RNR	2023-05-24 17:32:46 +01:00
x25	net/x25: Fix to not accept on connected socket	2023-02-09 11:28:13 +01:00
xdp	xsk: Fix unaligned descriptor validation	2023-05-11 23:03:21 +09:00
xfrm	xfrm: Check if_id in inbound policy/secpath match	2023-06-09 10:34:10 +02:00
compat.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
devres.c
Kconfig
Kconfig.debug	net: make NET_(DEV|NS)_REFCNT_TRACKER depend on NET	2022-09-20 14:23:56 -07:00
Makefile
socket.c	net: annotate sk->sk_err write from do_recvmmsg()	2023-05-24 17:32:32 +01:00
sysctl_net.c