Sven Eckelmann 82bb5f8aba batman-adv: Hold rtnl lock during MTU update via netlink ... commit 987aae75fc1041072941ffb622b45ce2359a99b9 upstream. The automatic recalculation of the maximum allowed MTU is usually triggered by code sections which are already rtnl lock protected by callers outside of batman-adv. But when the fragmentation setting is changed via batman-adv's own batadv genl family, then the rtnl lock is not yet taken. But dev_set_mtu requires that the caller holds the rtnl lock because it uses netdevice notifiers. And this code will then fail the check for this lock: RTNL: assertion failed at net/core/dev.c (1953) Cc: stable@vger.kernel.org Reported-by: syzbot+f8812454d9b3ac00d282@syzkaller.appspotmail.com Fixes: c6a953cce8d0 ("batman-adv: Trigger events for auto adjusted MTU") Signed-off-by: Sven Eckelmann <sven@narfation.org> Reviewed-by: Simon Horman <horms@kernel.org> Link: https://lore.kernel.org/r/20230821-batadv-missing-mtu-rtnl-lock-v1-1-1c5a7bfe861e@narfation.org Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-08-30 16:11:08 +02:00
..
6lowpan
9p	9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition	2023-04-20 12:35:08 +02:00
802	mrp: introduce active flags to prevent UAF when applicant uninit	2022-12-31 13:33:02 +01:00
8021q	vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()	2023-05-24 17:32:47 +01:00
appletalk
atm	atm: hide unused procfs functions	2023-06-09 10:34:16 +02:00
ax25
batman-adv	batman-adv: Hold rtnl lock during MTU update via netlink	2023-08-30 16:11:08 +02:00
bluetooth	Bluetooth: MGMT: Use correct address for memcpy()	2023-08-23 17:52:27 +02:00
bpf	Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"	2023-03-17 08:50:32 +01:00
bpfilter
bridge	bridge: Add extack warning when enabling STP in netns.	2023-07-27 08:50:40 +02:00
caif	net: caif: Fix use-after-free in cfusbl_device_notify()	2023-03-17 08:50:24 +01:00
can	can: isotp: fix support for transmission of SF without flow control	2023-08-30 16:11:03 +02:00
ceph	libceph: fix potential hang in ceph_osdc_notify()	2023-08-11 12:08:19 +02:00
core	rtnetlink: Reject negative ifindexes in RTM_NEWLINK	2023-08-30 16:11:04 +02:00
dcb	net: dcb: choose correct policy to parse DCB_ATTR_BCN	2023-08-11 12:08:17 +02:00
dccp	ipv4: fix data-races around inet->inet_id	2023-08-30 16:11:02 +02:00
devlink	devlink: add missing unregister linecard notification	2023-08-30 16:11:00 +02:00
dns_resolver
dsa	net: dsa: sja1105: always enable the send_meta options	2023-07-19 16:22:06 +02:00
ethernet
ethtool	ethtool: Fix uninitialized number of lanes	2023-05-17 11:53:37 +02:00
hsr	hsr: ratelimit only when errors are printed	2023-04-06 12:10:58 +02:00
ieee802154
ife
ipv4	ipv4: fix data-races around inet->inet_id	2023-08-30 16:11:02 +02:00
ipv6	ip6_vti: fix slab-use-after-free in decode_session6	2023-08-23 17:52:32 +02:00
iucv	net/iucv: Fix size of interrupt data	2023-03-22 13:33:50 +01:00
kcm	kcm: close race conditions on sk_receive_queue	2022-11-15 12:42:26 +01:00
key	net: af_key: fix sadb_x_filter validation	2023-08-23 17:52:32 +02:00
l2tp	net: annotate data-races around sk->sk_mark	2023-08-11 12:08:14 +02:00
l3mdev
lapb
llc	llc: Don't drop packet from non-root netns.	2023-07-27 08:50:45 +02:00
mac80211	wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning	2023-08-30 16:11:05 +02:00
mac802154	mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()	2022-12-05 09:53:08 +01:00
mctp	net: mctp: purge receive queues on sk destruction	2023-02-06 08:06:34 +01:00
mpls	net: mpls: fix stale pointer if allocation fails during device rename	2023-02-22 12:59:53 +01:00
mptcp	mptcp: fix the incorrect judgment for msk->cb_flags	2023-08-16 18:27:26 +02:00
ncsi	net/ncsi: change from ndo_set_mac_address to dev_set_mac_address	2023-07-23 13:49:51 +02:00
netfilter	netfilter: nf_tables: fix out of memory error handling	2023-08-30 16:11:03 +02:00
netlabel
netlink	netlink: Add __sock_i_ino() for __netlink_diag_dump().	2023-07-19 16:21:13 +02:00
netrom	netrom: fix info-leak in nr_write_internal()	2023-06-09 10:34:01 +02:00
nfc	net: nfc: Fix use-after-free caused by nfc_llcp_find_local	2023-07-19 16:21:13 +02:00
nsh	net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()	2023-05-24 17:32:45 +01:00
openvswitch	net: openvswitch: reject negative ifindex	2023-08-23 17:52:35 +02:00
packet	net/packet: annotate data-races around tp->status	2023-08-16 18:27:26 +02:00
phonet
psample
qrtr	net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()	2023-04-20 12:35:09 +02:00
rds	rds: rds_rm_zerocopy_callback() correct order for list_add_tail()	2023-03-10 09:33:02 +01:00
rfkill
rose	net/rose: Fix to not accept on connected socket	2023-02-22 12:59:42 +01:00
rxrpc	rxrpc: Fix hard call timeout units	2023-05-17 11:53:35 +02:00
sched	net/sched: fix a qdisc modification with ambiguous command request	2023-08-30 16:11:03 +02:00
sctp	ipv4: fix data-races around inet->inet_id	2023-08-30 16:11:02 +02:00
smc	net/smc: Fix setsockopt and sysctl to specify same buffer size again	2023-08-23 17:52:18 +02:00
strparser
sunrpc	xprtrdma: Remap Receive buffers after a reconnect	2023-08-30 16:10:57 +02:00
switchdev
tipc	tipc: stop tipc crypto on failure in tipc_node_create	2023-08-03 10:24:02 +02:00
tls	net: tls: avoid discarding data on record close	2023-08-16 18:27:27 +02:00
unix	af_unix: Fix null-ptr-deref in unix_stream_sendpage().	2023-08-23 17:52:42 +02:00
vmw_vsock	vsock: avoid to close connected socket after the timeout	2023-05-24 17:32:44 +01:00
wireless	wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()	2023-08-16 18:27:20 +02:00
x25	net/x25: Fix to not accept on connected socket	2023-02-09 11:28:13 +01:00
xdp	xsk: fix refcount underflow in error path	2023-08-16 18:27:27 +02:00
xfrm	xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH	2023-08-23 17:52:32 +02:00
compat.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
devres.c
Kconfig
Kconfig.debug
Makefile	devlink: move code to a dedicated directory	2023-08-30 16:11:00 +02:00
socket.c	net: annotate sk->sk_err write from do_recvmmsg()	2023-05-24 17:32:32 +01:00
sysctl_net.c