Pablo Neira Ayuso 67ee37360d netfilter: nf_tables: validate NFPROTO_* family ...

[ Upstream commit d0009effa8862c20a13af4cb7475d9771b905693 ]

Several expressions explicitly refer to NF_INET_* hook definitions
from expr->ops->validate, however, family is not validated.

Bail out with EOPNOTSUPP in case they are used from unsupported
families.

Fixes: 0ca743a559 ("netfilter: nf_tables: add compatibility layer for x_tables")
Fixes: a3c90f7a23 ("netfilter: nf_tables: flow offload expression")
Fixes: 2fa841938c ("netfilter: nf_tables: introduce routing expression")
Fixes: 554ced0a6e ("netfilter: nf_tables: add support for native socket matching")
Fixes: ad49d86e07 ("netfilter: nf_tables: Add synproxy support")
Fixes: 4ed8eb6570 ("netfilter: nf_tables: Add native tproxy support")
Fixes: 6c47260250 ("netfilter: nf_tables: add xfrm expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-01-31 16:17:06 -08:00

..

6lowpan

…

9p

…

802

…

8021q

vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING

2024-01-31 16:17:04 -08:00

appletalk

…

atm

…

ax25

…

batman-adv

…

bluetooth

Bluetooth: Fix atomicity violation in {min,max}_key_size_set

2024-01-25 15:27:43 -08:00

bpf

…

bpfilter

…

bridge

netfilter: bridge: replace physindev with physinif in nf_bridge_info

2024-01-25 15:27:51 -08:00

caif

…

can

net: annotate data-races around sk->sk_tsflags

2024-01-10 17:10:23 +01:00

ceph

…

core

net: fix removing a namespace with conflicting altnames

2024-01-31 16:17:04 -08:00

dcb

…

dccp

…

devlink

…

dns_resolver

keys, dns: Fix size check of V1 server-list header

2024-01-25 15:27:38 -08:00

dsa

…

ethernet

…

ethtool

ethtool: netlink: Add missing ethnl_ops_begin/complete

2024-01-25 15:27:51 -08:00

hsr

…

ieee802154

…

ife

…

ipv4

tcp: Add memory barrier to tcp_push()

2024-01-31 16:17:05 -08:00

ipv6

ipv6: init the accept_queue's spinlocks in inet6_create

2024-01-31 16:17:05 -08:00

iucv

…

kcm

…

key

…

l2tp

udp: annotate data-races around udp->encap_type

2024-01-10 17:10:28 +01:00

l3mdev

…

lapb

…

llc

llc: Drop support for ETH_P_TR_802_2.

2024-01-31 16:17:04 -08:00

mac80211

wifi: mac80211: fix potential sta-link leak

2024-01-31 16:17:03 -08:00

mac802154

…

mctp

…

mpls

…

mptcp

mptcp: relax check on MPC passive fallback

2024-01-25 15:27:50 -08:00

ncsi

net/ncsi: Fix netlink major/minor version numbers

2024-01-25 15:27:24 -08:00

netfilter

netfilter: nf_tables: validate NFPROTO_* family

2024-01-31 16:17:06 -08:00

netlabel

calipso: fix memory leak in netlbl_calipso_add_pass()

2024-01-25 15:27:20 -08:00

netlink

netlink: fix potential sleeping issue in mqueue_flush_file

2024-01-31 16:17:05 -08:00

netrom

…

nfc

nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local

2024-01-10 17:10:22 +01:00

nsh

…

openvswitch

net/sched: act_ct: Always fill offloading tuple iifidx

2024-01-10 17:10:36 +01:00

packet

…

phonet

…

psample

…

qrtr

net: qrtr: ns: Return 0 if server port is not present

2024-01-20 11:50:09 +01:00

rds

net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv

2024-01-31 16:17:04 -08:00

rfkill

…

rose

…

rxrpc

…

sched

net/sched: act_ct: fix skb leak and crash on ooo frags

2024-01-25 15:27:31 -08:00

sctp

sctp: fix busy polling

2024-01-25 15:27:30 -08:00

smc

net/smc: fix illegal rmb_desc access in SMC-D connection dump

2024-01-31 16:17:03 -08:00

strparser

…

sunrpc

SUNRPC: fix _xprt_switch_find_current_entry logic

2024-01-25 15:27:23 -08:00

switchdev

…

tipc

…

tls

…

unix

bpf: sockmap, fix proto update hook to avoid dup calls

2024-01-25 15:27:30 -08:00

vmw_vsock

virtio/vsock: fix logic which reduces credit update messages

2024-01-25 15:27:28 -08:00

wireless

wifi: cfg80211: lock wiphy mutex for rfkill poll

2024-01-20 11:50:03 +01:00

x25

…

xdp

…

xfrm

…

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

splice, net: Add a splice_eof op to file-ops and socket-ops

2024-01-10 17:10:27 +01:00

sysctl_net.c

…