[0/7] pull request (net): ipsec 2023-10-17

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git tags/ipsec-2023-10-17

Message

Steffen Klassert Oct. 17, 2023, 8:37 a.m. UTC

1) Fix a slab-use-after-free in xfrm_policy_inexact_list_reinsert.
   From Dong Chenchen.

2) Fix data-races in the xfrm interfaces dev->stats fields.
   From Eric Dumazet.

3) Fix a data-race in xfrm_gen_index.
   From Eric Dumazet.

4) Fix an inet6_dev refcount underflow.
   From Zhang Changzhong.

5) Check the return value of pskb_trim in esp_remove_trailer
   for esp4 and esp6. From Ma Ke.

6) Fix a data-race in xfrm_lookup_with_ifid.
   From Eric Dumazet.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit d3287e4038ca4f81e02067ab72d087af7224c68b:

  Revert "net: macsec: preserve ingress frame ordering" (2023-09-05 10:56:55 +0200)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec.git tags/ipsec-2023-10-17

for you to fetch changes up to de5724ca38fd5e442bae9c1fab31942b6544012d:

  xfrm: fix a data-race in xfrm_lookup_with_ifid() (2023-10-13 07:57:27 +0200)

----------------------------------------------------------------
ipsec-2023-10-17

----------------------------------------------------------------
Dong Chenchen (1):
      net: xfrm: skip policies marked as dead while reinserting policies

Eric Dumazet (3):
      xfrm: interface: use DEV_STATS_INC()
      xfrm: fix a data-race in xfrm_gen_index()
      xfrm: fix a data-race in xfrm_lookup_with_ifid()

Ma Ke (2):
      net: ipv6: fix return value check in esp_remove_trailer
      net: ipv4: fix return value check in esp_remove_trailer

Zhang Changzhong (1):
      xfrm6: fix inet6_dev refcount underflow problem

 include/net/netns/xfrm.h       |  1 +
 net/ipv4/esp4.c                |  4 +++-
 net/ipv6/esp6.c                |  4 +++-
 net/ipv6/xfrm6_policy.c        |  4 ++--
 net/xfrm/xfrm_interface_core.c | 22 ++++++++++------------
 net/xfrm/xfrm_policy.c         | 27 ++++++++++++++++-----------
 6 files changed, 35 insertions(+), 27 deletions(-)