linux-yocto/net
Eric Dumazet a5e3a14426 net: atm: fix /proc/net/atm/lec handling
[ Upstream commit d03b79f459 ]

/proc/net/atm/lec must ensure safety against dev_lec[] changes.

It appears it had dev_put() calls without prior dev_hold(),
leading to imbalance and UAF.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Acked-by: Francois Romieu <romieu@fr.zoreil.com> # Minor atm contributor
Link: https://patch.msgid.link/20250618140844.1686882-3-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-27 11:09:02 +01:00
..
6lowpan
9p 9p/net: fix improper handling of bogus negative read/write replies 2025-05-02 07:50:56 +02:00
802
8021q net: vlan: don't propagate flags on open 2025-04-25 10:45:16 +02:00
appletalk
atm net: atm: fix /proc/net/atm/lec handling 2025-06-27 11:09:02 +01:00
ax25 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2025-02-21 13:57:06 +01:00
batman-adv batman-adv: Ignore own maximum aggregation size during RX 2025-03-28 21:59:55 +01:00
bluetooth Bluetooth: MGMT: Fix sparse errors 2025-06-19 15:28:42 +02:00
bpf bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() 2025-02-27 04:10:50 -08:00
bpfilter
bridge net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions 2025-06-27 11:08:55 +01:00
caif
can can: bcm: add missing rcu read protection for procfs content 2025-06-04 14:42:19 +02:00
ceph
core bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE 2025-06-27 11:09:00 +01:00
dcb
dccp
devlink
dns_resolver
dsa net: dsa: tag_brcm: legacy: fix pskb_may_pull length 2025-06-19 15:28:33 +02:00
ethernet
ethtool net: ethtool: Don't call .cleanup_data when prepare_data fails 2025-04-25 10:45:07 +02:00
handshake
hsr
ieee802154 net: Rename mono_delivery_time to tstamp_type for scalabilty 2025-05-09 09:43:57 +02:00
ife
ipv4 tcp: fix passive TFO socket having invalid NAPI ID 2025-06-27 11:09:02 +01:00
ipv6 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). 2025-06-27 11:09:02 +01:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc llc: fix data loss when reading from a socket in llc_ui_recvmsg() 2025-06-04 14:42:20 +02:00
mac80211 wifi: mac80211: VLAN traffic in multicast path 2025-06-27 11:08:55 +01:00
mac802154
mctp net: mctp: Ensure keys maintain only one ref to corresponding dev 2025-05-22 14:12:16 +02:00
mpls mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). 2025-06-27 11:09:02 +01:00
mptcp mptcp: sockopt: fix getting freebind & transparent 2025-04-25 10:45:54 +02:00
ncsi net: ncsi: Fix GCPS 64-bit member variables 2025-06-19 15:28:10 +02:00
netfilter netfilter: nf_nat: also check reverse tuple to obtain clashing entry 2025-06-19 15:28:34 +02:00
netlabel calipso: unlock rcu before returning -EAFNOSUPPORT 2025-06-19 15:28:46 +02:00
netlink
netrom
nfc NFC: nci: uart: Set tty->disc_data only in success path 2025-06-27 11:08:48 +01:00
nsh
openvswitch net: openvswitch: Fix the dead loop of MPLS parse 2025-06-19 15:28:19 +02:00
packet
phonet
psample
qrtr
rds
rfkill
rose net: rose: lock the socket in rose_bind() 2025-02-17 09:40:13 +01:00
rxrpc rxrpc: rxperf: Fix missing decoding of terminal magic cookie 2025-03-07 16:45:38 +01:00
sched net_sched: sch_sfq: reject invalid perturb period 2025-06-27 11:08:59 +01:00
sctp sctp: Do not wake readers in __sctp_write_space() 2025-06-27 11:08:53 +01:00
smc net/smc: use the correct ndev to find pnetid by pnetid table 2025-06-04 14:41:59 +02:00
strparser strparser: Add read_sock callback 2025-02-27 04:10:50 -08:00
sunrpc sunrpc: handle SVC_GARBAGE during svc auth processing as auth error 2025-06-27 11:09:00 +01:00
switchdev net: switchdev: Convert blocking notification chain to a raw one 2025-03-22 12:50:39 -07:00
tipc tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer 2025-06-27 11:09:02 +01:00
tls ktls, sockmap: Fix missing uncharge operation 2025-06-19 15:28:15 +02:00
unix af_unix: Fix uninit-value in __unix_walk_scc() 2025-06-04 14:42:24 +02:00
vmw_vsock vsock: avoid timeout during connect() if the socket is closing 2025-04-10 14:37:40 +02:00
wireless wifi: cfg80211: init wiphy_work before allocating rfkill fails 2025-06-27 11:09:00 +01:00
x25
xdp xsk: fix an integer overflow in xp_create_and_assign_umem() 2025-03-28 21:59:55 +01:00
xfrm xfrm: Use xdo.dev instead of xdo.real_dev 2025-06-19 15:28:11 +02:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile af_unix: Remove CONFIG_UNIX_SCM. 2025-06-04 14:42:22 +02:00
socket.c
sysctl_net.c