Florian Westphal b32e1590a8 netfilter: nf_reject: don't leak dst refcount for loopback packets ... [ Upstream commit 91a79b792204313153e1bdbbe5acbfc28903b3a5 ] recent patches to add a WARN() when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skb_dst_check_unset include/linux/skbuff.h:1164 [inline] WARNING: include/linux/skbuff.h:1165 skb_dst_set include/linux/skbuff.h:1210 [inline] WARNING: include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 net/ipv4/netfilter/nf_reject_ipv4.c:234 [..] Call Trace: nf_send_unreach+0x17b/0x6e0 net/ipv4/netfilter/nf_reject_ipv4.c:325 nft_reject_inet_eval+0x4bc/0x690 net/netfilter/nft_reject_inet.c:27 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] .. This is because blamed commit forgot about loopback packets. Such packets already have a dst_entry attached, even at PRE_ROUTING stage. Instead of checking hook just check if the skb already has a route attached to it. Fixes: f53b9b0bdc ("netfilter: introduce support for reject at prerouting stage") Signed-off-by: Florian Westphal <fw@strlen.de> Link: https://patch.msgid.link/20250820123707.10671-1-fw@strlen.de Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-08-28 16:34:51 +02:00
..
6lowpan
9p	netfs: Fix the request's work item to not require a ref	2025-05-21 14:35:20 +02:00
802	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
8021q	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime	2025-07-17 07:44:26 -07:00
appletalk	net: appletalk: Fix use-after-free in AARP proxy probe	2025-07-21 16:55:08 -07:00
atm	atm: clip: Fix NULL pointer dereference in vcc_sendmsg()	2025-07-09 19:09:36 -07:00
ax25	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
batman-adv	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
bluetooth	Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections	2025-08-28 16:34:45 +02:00
bpf
bridge	net: bridge: fix soft lockup in br_multicast_query_expired()	2025-08-28 16:34:44 +02:00
caif	caif: reduce stack size, again	2025-08-15 16:38:40 +02:00
can	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
ceph
core	net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM	2025-08-28 16:34:46 +02:00
dcb
devlink	devlink: let driver opt out of automatic phys_port_name generation	2025-08-28 16:34:42 +02:00
dns_resolver
dsa	net: dsa: tag_brcm: legacy: fix pskb_may_pull length	2025-05-30 19:20:18 -07:00
ethernet
ethtool	Including fixes from bluetooth and wireless.	2025-06-12 09:50:36 -07:00
handshake
hsr	net, hsr: reject HSR frame if skb can't hold tag	2025-08-28 16:34:31 +02:00
ieee802154	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
ife
ipv4	netfilter: nf_reject: don't leak dst refcount for loopback packets	2025-08-28 16:34:51 +02:00
ipv6	netfilter: nf_reject: don't leak dst refcount for loopback packets	2025-08-28 16:34:51 +02:00
iucv
kcm	net: kcm: Fix race condition in kcm_unattach()	2025-08-20 18:40:52 +02:00
key	Revert "xfrm: destroy xfrm_state synchronously on net exit path"	2025-07-08 13:28:29 +02:00
l2tp	net: annotate races around sk->sk_uid	2025-08-15 16:38:40 +02:00
l3mdev
lapb	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
llc	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
mac80211	wifi: mac80211: update radar_required in channel context after channel switch	2025-08-20 18:41:16 +02:00
mac802154
mctp	net: mctp: Prevent duplicate binds	2025-08-20 18:41:08 +02:00
mpls	mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().	2025-06-17 18:21:59 -07:00
mptcp	mptcp: disable add_addr retransmission when timeout is 0	2025-08-28 16:34:32 +02:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-08-20 18:41:19 +02:00
netfilter	netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps	2025-08-20 18:41:04 +02:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-05 08:03:38 -07:00
netlink	netlink: avoid infinite retry looping in netlink_unicast()	2025-08-20 18:40:45 +02:00
netrom	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
nfc	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-19 08:33:54 -07:00
nsh
openvswitch	openvswitch: Allocate struct ovs_pcpu_storage dynamically	2025-06-17 14:47:46 +02:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-15 16:39:31 +02:00
phonet	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()	2025-07-17 07:30:27 -07:00
psample
qrtr
rds	replace strncpy with strscpy_pad	2025-05-26 22:28:44 +02:00
rfkill
rose	rose: fix dangling neighbour pointers in rose_rt_device_down()	2025-07-01 19:28:48 -07:00
rxrpc	rxrpc: Fix to use conn aborts for conn-wide failures	2025-07-17 07:50:48 -07:00
sched	net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate	2025-08-28 16:34:49 +02:00
sctp	sctp: linearize cloned gso packets in sctp_rcv	2025-08-20 18:40:51 +02:00
shaper
smc	net/smc: fix UAF on smcsk after smc_listen_out()	2025-08-28 16:34:48 +02:00
strparser
sunrpc	sunrpc: fix handling of server side tls alerts	2025-08-15 16:39:30 +02:00
switchdev
tipc	tipc: Fix use-after-free in tipc_conn_close().	2025-07-07 18:38:24 -07:00
tls	tls: fix handling of zero-length records on the rx_list	2025-08-28 16:34:41 +02:00
unix	af_unix: Don't set -ECONNRESET for consumed OOB skb.	2025-06-24 10:10:07 +02:00
vmw_vsock	vsock/virtio: Validate length in packet header before skb_put()	2025-08-28 16:34:25 +02:00
wireless	wifi: cfg80211: reject HTC bit for management frames	2025-08-20 18:41:06 +02:00
x25	treewide, timers: Rename from_timer() to timer_container_of()	2025-06-08 09:07:37 +02:00
xdp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2025-05-22 09:42:41 -07:00
xfrm	xfrm: Duplicate SPI Handling	2025-08-20 18:41:13 +02:00
compat.c
devres.c
Kconfig	net: Kconfig NET_DEVMEM selects GENERIC_ALLOCATOR	2025-05-27 17:31:42 -07:00
Kconfig.debug
Makefile
socket.c	net: annotate races around sk->sk_uid	2025-08-15 16:38:40 +02:00
sysctl_net.c