[0/6] pull request (net): ipsec 2022-08-24

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

Message

Steffen Klassert Aug. 24, 2022, 5:02 a.m. UTC

1) Fix a refcount leak in __xfrm_policy_check.
   From Xin Xiong.

2) Revert "xfrm: update SA curlft.use_time". This
   violates RFC 2367. From Antony Antony.

3) Fix a comment on XFRMA_LASTUSED.
   From Antony Antony.

4) x->lastused is not cloned in xfrm_do_migrate.
   Fix from Antony Antony.

5) Serialize the calls to xfrm_probe_algs.
   From Herbert Xu.

6) Fix a null pointer dereference of dst->dev on a metadata
   dst in xfrm_lookup_with_ifid. From Nikolay Aleksandrov.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 9b134b1694ec8926926ba6b7b80884ea829245a0:

  bridge: Do not send empty IFLA_AF_SPEC attribute (2022-07-26 15:35:53 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git master

for you to fetch changes up to 17ecd4a4db4783392edd4944f5e8268205083f70:

  xfrm: policy: fix metadata dst->dev xmit null pointer dereference (2022-08-17 11:06:37 +0200)

----------------------------------------------------------------
Antony Antony (3):
      Revert "xfrm: update SA curlft.use_time"
      xfrm: fix XFRMA_LASTUSED comment
      xfrm: clone missing x->lastused in xfrm_do_migrate

Herbert Xu (1):
      af_key: Do not call xfrm_probe_algs in parallel

Nikolay Aleksandrov (1):
      xfrm: policy: fix metadata dst->dev xmit null pointer dereference

Xin Xiong (1):
      xfrm: fix refcount leak in __xfrm_policy_check()

 include/uapi/linux/xfrm.h | 2 +-
 net/key/af_key.c          | 3 +++
 net/xfrm/xfrm_input.c     | 1 -
 net/xfrm/xfrm_output.c    | 1 -
 net/xfrm/xfrm_policy.c    | 3 ++-
 net/xfrm/xfrm_state.c     | 1 +
 6 files changed, 7 insertions(+), 4 deletions(-)