Florian Westphal 85c31887a2 xfrm: don't call xfrm_policy_cache_flush while holding spinlock ... commit b1bdcb59b6 upstream. xfrm_policy_cache_flush can sleep, so it cannot be called while holding a spinlock. We could release the lock first, but I don't see why we need to invoke this function here in first place, the packet path won't reuse an xdst entry unless its still valid. While at it, add an annotation to xfrm_policy_cache_flush, it would have probably caught this bug sooner. Fixes: ec30d78c14 ("xfrm: add xdst pcpu cache") Reported-by: syzbot+e149f7d1328c26f9c12f@syzkaller.appspotmail.com Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-25 11:07:46 +01:00
..
6lowpan
9p	9p/trans_virtio: discard zero-length reply	2018-02-22 15:42:30 +01:00
802
8021q	8021q: fix a memory leak for VLAN 0 device	2018-01-17 09:45:20 +01:00
appletalk
atm
ax25
batman-adv
bluetooth	Bluetooth: Prevent stack info leak from the EFS element.	2018-01-17 09:45:26 +01:00
bpf
bridge	net: bridge: fix early call to br_stp_change_bridge_id and plug newlink leaks	2018-01-02 20:31:09 +01:00
caif
can	can: af_can: canfd_rcv(): replace WARN_ONCE by pr_warn_once	2018-01-23 19:58:17 +01:00
ceph	libceph: don't WARN() if user tries to add invalid key	2017-11-30 08:40:45 +00:00
core	kmemcheck: remove annotations	2018-02-22 15:42:23 +01:00
dcb
dccp	dccp: CVE-2017-8824: use-after-free in DCCP code	2018-02-16 20:22:45 +01:00
decnet
dns_resolver
dsa	net: dsa: return after vlan prepare phase	2017-11-11 15:45:09 +09:00
ethernet
hsr
ieee802154
ife
ipv4	esp: Fix GRO when the headers not fully in the linear part of the skb.	2018-02-25 11:07:46 +01:00
ipv6	esp: Fix GRO when the headers not fully in the linear part of the skb.	2018-02-25 11:07:46 +01:00
ipx
iucv
kcm	kcm: Only allow TCP sockets to be attached to a KCM mux	2018-02-25 11:07:45 +01:00
key	af_key: fix buffer overread in parse_exthdrs()	2018-01-23 19:58:12 +01:00
l2tp	l2tp: cleanup l2tp_tunnel_delete calls	2017-12-20 10:10:31 +01:00
l3mdev
lapb
llc
mac80211	mac80211: fix the update of path metric for RANN frame	2018-02-03 17:39:03 +01:00
mac802154
mpls	mpls, nospec: Sanitize array index in mpls_label_ok()	2018-02-22 15:42:28 +01:00
ncsi
netfilter	netfilter: xt_osf: Add missing permission checks	2018-01-31 14:03:41 +01:00
netlabel
netlink	netlink: reset extack earlier in netlink_rcv_skb	2018-01-31 14:03:48 +01:00
netrom
nfc	NFC: fix device-allocation error return	2017-11-30 08:40:55 +00:00
nsh
openvswitch	openvswitch: fix the incorrect flow action alloc size	2018-02-03 17:39:03 +01:00
packet	net/packet: fix a race in packet_bind() and packet_notifier()	2017-12-17 15:07:56 +01:00
phonet
psample
qrtr
rds	RDS: null pointer dereference in rds_atomic_free_op	2018-01-17 09:45:21 +01:00
rfkill
rose
rxrpc	rxrpc: Fix service endpoint expiry	2018-02-03 17:39:01 +01:00
sched	net/sched: Fix update of lastuse in act modules implementing stats_update	2018-01-17 09:45:22 +01:00
sctp	sctp: set sender next_tsn for the old result with ctsn_ack_point plus 1	2018-02-03 17:39:04 +01:00
smc	net/smc: use sk_rcvbuf as start for rmb creation	2017-12-14 09:53:05 +01:00
strparser
sunrpc	xprtrdma: Fix BUG after a device removal	2018-02-22 15:42:29 +01:00
switchdev
tipc	tipc: fix a memory leak in tipc_nl_node_get_link()	2018-01-31 14:03:46 +01:00
tls	tls: reset crypto_info when do_tls_setsockopt_tx fails	2018-01-31 14:03:48 +01:00
unix
vmw_vsock
wimax
wireless	mac80211_hwsim: validate number of different channels	2018-02-25 11:07:45 +01:00
x25
xfrm	xfrm: don't call xfrm_policy_cache_flush while holding spinlock	2018-02-25 11:07:46 +01:00
compat.c
Kconfig
Makefile
socket.c	kmemcheck: remove annotations	2018-02-22 15:42:23 +01:00
sysctl_net.c