Jakub Kicinski 86dc27ee36 tls: fix race between async notify and socket close ... [ Upstream commit aec7961916f3f9e88766e2688992da6980f11b8d ] The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touching already freed data. Try to avoid the locking and extra flags altogether. Have the main thread hold an extra reference, this way we can depend solely on the atomic ref counter for synchronization. Don't futz with reiniting the completion, either, we are now tightly controlling when completion fires. Reported-by: valis <sec@valis.email> Fixes: 0cada33241 ("net/tls: fix race condition causing kernel panic") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Reviewed-by: Simon Horman <horms@kernel.org> Reviewed-by: Eric Dumazet <edumazet@google.com> Reviewed-by: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-02-23 09:24:52 +01:00
..
6lowpan	…
9p	net: 9p: avoid freeing uninit memory in p9pdu_vreadf	2024-01-01 12:42:41 +00:00
802	…
8021q	vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING	2024-01-31 16:19:01 -08:00
appletalk	appletalk: Fix Use-After-Free in atalk_ioctl	2023-12-20 17:01:50 +01:00
atm	atm: Fix Use-After-Free in do_vcc_ioctl	2023-12-20 17:01:48 +01:00
ax25	ax25: Kconfig: Update link for linux-ax25.org	2023-09-18 12:56:58 +01:00
batman-adv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-08-24 10:51:39 -07:00
bluetooth	Bluetooth: L2CAP: Fix possible multiple reject send	2024-02-05 20:14:25 +00:00
bpf	bpf: Fix a few selftest failures due to llvm18 change	2024-02-05 20:14:20 +00:00
bpfilter	net: Use umd_cleanup_helper()	2023-05-31 13:06:57 +02:00
bridge	bridge: mcast: fix disabled snooping after long uptime	2024-02-05 20:14:36 +00:00
caif	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
can	can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior	2023-10-06 12:54:33 +02:00
ceph	libceph: just wait for more data to be available on the socket	2024-02-16 19:10:53 +01:00
core	xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL	2024-01-31 16:19:05 -08:00
dcb	net: dcb: choose correct policy to parse DCB_ATTR_BCN	2023-08-01 21:07:46 -07:00
dccp	dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.	2023-11-20 11:59:35 +01:00
devlink	devlink: Fix referring to hw_addr attribute during state validation	2024-02-05 20:14:36 +00:00
dns_resolver	keys, dns: Fix size check of V1 server-list header	2024-01-25 15:35:41 -08:00
dsa	net: dsa: mark parsed interface mode for legacy switch drivers	2023-08-09 13:08:09 -07:00
ethernet	…
ethtool	ethtool: netlink: Add missing ethnl_ops_begin/complete	2024-01-25 15:36:00 -08:00
handshake	net/handshake: Fix handshake_req_destroy_test1	2024-02-23 09:24:50 +01:00
hsr	hsr: Prevent use after free in prp_create_tagged_frame()	2023-11-20 11:59:34 +01:00
ieee802154	sysctl-6.6-rc1	2023-08-29 17:39:15 -07:00
ife	net: sched: ife: fix potential use-after-free	2024-01-01 12:42:30 +00:00
ipv4	inet: read sk->sk_family once in inet_recv_error()	2024-02-16 19:10:49 +01:00
ipv6	ipv6: Ensure natural alignment of const ipv6 loopback and router addresses	2024-02-05 20:14:36 +00:00
iucv	…
kcm	net: kcm: fix direct access to bv_len	2024-02-05 20:14:25 +00:00
key	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-08-18 12:44:56 -07:00
l2tp	udp: annotate data-races around udp->encap_type	2023-11-20 11:58:56 +01:00
l3mdev	…
lapb	…
llc	llc: call sock_orphan() at release time	2024-02-05 20:14:36 +00:00
mac80211	wifi: mac80211: fix waiting for beacons logic	2024-02-16 19:10:47 +01:00
mac802154	Core WPAN changes:	2023-06-24 15:41:46 -07:00
mctp	mctp: perform route lookups under a RCU read-side lock	2023-10-10 19:43:22 -07:00
mpls	networking: Update to register_net_sysctl_sz	2023-08-15 15:26:18 -07:00
mptcp	mptcp: relax check on MPC passive fallback	2024-01-25 15:35:59 -08:00
ncsi	net/ncsi: Fix netlink major/minor version numbers	2024-01-25 15:35:20 -08:00
netfilter	work around gcc bugs with 'asm goto' with outputs	2024-02-23 09:24:47 +01:00
netlabel	calipso: fix memory leak in netlbl_calipso_add_pass()	2024-01-25 15:35:14 -08:00
netlink	netlink: fix potential sleeping issue in mqueue_flush_file	2024-01-31 16:19:02 -08:00
netrom	netrom: Deny concurrent connect().	2023-08-28 06:58:46 +01:00
nfc	nfc: Do not send datagram if socket state isn't LLCP_BOUND	2024-01-20 11:51:46 +01:00
nsh	net: move gso declarations and functions to their own files	2023-06-10 00:11:41 -07:00
openvswitch	net: openvswitch: limit the number of recursions from action sets	2024-02-23 09:24:51 +01:00
packet	packet: Move reference count in packet_sock to atomic_long_t	2023-12-13 18:45:23 +01:00
phonet	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
psample	psample: Require 'CAP_NET_ADMIN' when joining "packets" group	2023-12-13 18:45:10 +01:00
qrtr	net: qrtr: ns: Return 0 if server port is not present	2024-01-20 11:51:47 +01:00
rds	net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv	2024-01-31 16:19:01 -08:00
rfkill	net: rfkill: gpio: set GPIO direction	2024-01-01 12:42:41 +00:00
rose	net/rose: fix races in rose_kill_by_device()	2024-01-01 12:42:31 +00:00
rxrpc	rxrpc: Fix counting of new acks and nacks	2024-02-16 19:10:50 +01:00
sched	net/sched: flower: Fix chain template offload	2024-01-31 16:19:02 -08:00
sctp	sctp: fix busy polling	2024-01-25 15:35:30 -08:00
smc	net/smc: disable SEID on non-s390 archs where virtual ISM may be used	2024-02-05 20:14:25 +00:00
strparser	…
sunrpc	SUNRPC: Fix a suspicious RCU usage warning	2024-02-05 20:14:17 +00:00
switchdev	net: switchdev: Add a helper to replay objects on a bridge port	2023-07-21 08:54:03 +01:00
tipc	tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()	2024-02-16 19:10:50 +01:00
tls	tls: fix race between async notify and socket close	2024-02-23 09:24:52 +01:00
unix	af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC.	2024-02-16 19:10:50 +01:00
vmw_vsock	virtio/vsock: send credit update during setting SO_RCVLOWAT	2024-01-25 15:35:26 -08:00
wireless	wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update	2024-02-05 20:14:34 +00:00
x25	sock: Remove ->sendpage*() in favour of sendmsg(MSG_SPLICE_PAGES)	2023-06-24 15:50:13 -07:00
xdp	xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags	2024-01-31 16:19:04 -08:00
xfrm	ipsec-2023-10-17	2023-10-17 18:21:13 -07:00
Kconfig	bpf: Add fd-based tcx multi-prog infra with link support	2023-07-19 10:07:27 -07:00
Kconfig.debug	…
Makefile	net/handshake: Create a NETLINK service for handling handshake requests	2023-04-19 18:48:48 -07:00
compat.c	net/compat: Update msg_control_is_user when setting a kernel pointer	2023-04-14 11:09:27 +01:00
devres.c	…
socket.c	net: Save and restore msg_namelen in sock_sendmsg	2024-01-10 17:16:51 +01:00
sysctl_net.c	sysctl: Add size to register_net_sysctl function	2023-08-15 15:26:17 -07:00