Florian Westphal 0f6dcaf4cd netfilter: fib: check correct rtable in vrf setups ...

[ Upstream commit 05ef7055debc804e8083737402127975e7244fc4 ]

We need to init l3mdev unconditionally, else main routing table is searched
and incorrect result is returned unless strict (iif keyword) matching is
requested.

Next patch adds a selftest for this.

Fixes: 2a8a7c0eaa ("netfilter: nft_fib: Fix for rpath check with VRF devices")
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1761
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-10-17 15:22:22 +02:00

..

bpfilter

…

netfilter

netfilter: fib: check correct rtable in vrf setups

2024-10-17 15:22:22 +02:00

af_inet.c

net: relax socket state check at accept time.

2024-06-12 11:03:53 +02:00

ah4.c

…

arp.c

arp: Prevent overflow in arp_req_get().

2024-03-01 13:26:39 +01:00

bpf_tcp_ca.c

…

cipso_ipv4.c

cipso: fix total option length computation

2024-06-27 13:46:18 +02:00

datagram.c

ipv4: fix data-races around inet->inet_id

2023-08-30 16:11:02 +02:00

devinet.c

ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).

2024-10-17 15:21:38 +02:00

esp4_offload.c

xfrm: Linearize the skb after offloading if needed.

2023-06-28 11:12:29 +02:00

esp4.c

net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP

2024-08-03 08:49:03 +02:00

fib_frontend.c

ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family

2024-10-17 15:21:38 +02:00

fib_lookup.h

…

fib_notifier.c

…

fib_rules.c

…

fib_semantics.c

ipv4: fix source address selection with route leak

2024-08-03 08:49:31 +02:00

fib_trie.c

ipv4: Fix incorrect TOS in route get reply

2024-08-03 08:49:24 +02:00

fou.c

fou: fix initialization of grc

2024-09-18 19:23:05 +02:00

gre_demux.c

…

gre_offload.c

…

icmp.c

icmp: change the order of rate limits

2024-10-17 15:21:27 +02:00

igmp.c

ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet

2023-12-08 08:51:17 +01:00

inet_connection_sock.c

Fix race for duplicate reqsk on identical SYN

2024-07-05 09:31:46 +02:00

inet_diag.c

inet_diag: Initialize pad field in struct inet_diag_req_v2

2024-07-11 12:47:12 +02:00

inet_fragment.c

inet: inet_defrag: prevent sk release while still in use

2024-04-10 16:28:23 +02:00

inet_hashtables.c

net: remove duplicate reuseport_lookup functions

2024-06-12 11:03:12 +02:00

inet_timewait_sock.c

tcp/dccp: do not care about families in inet_twsk_purge()

2024-08-29 17:30:44 +02:00

inetpeer.c

…

ip_forward.c

…

ip_fragment.c

inet: inet_defrag: prevent sk release while still in use

2024-04-10 16:28:23 +02:00

ip_gre.c

ipv4: ip_gre: Fix drops of small packets in ipgre_xmit

2024-10-17 15:21:32 +02:00

ip_input.c

ipv4: ignore dst hint for multipath routes

2023-09-19 12:28:01 +02:00

ip_options.c

…

ip_output.c

net: ipv4: fix a memleak in ip_setup_cork

2024-02-05 20:13:02 +00:00

ip_sockglue.c

ipmr: fix kernel panic when forwarding mcast packets

2024-02-05 20:13:00 +00:00

ip_tunnel_core.c

tunnels: fix out of bounds access when building IPv6 PMTU error

2024-02-16 19:06:26 +01:00

ip_tunnel.c

net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()

2024-03-26 18:20:41 -04:00

ip_vti.c

ip_vti: fix potential slab-use-after-free in decode_session6

2023-08-23 17:52:32 +02:00

ipcomp.c

…

ipconfig.c

…

ipip.c

…

ipmr_base.c

…

ipmr.c

ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function

2024-03-26 18:20:42 -04:00

Kconfig

…

Makefile

…

metrics.c

…

netfilter.c

…

netlink.c

…

nexthop.c

net: nexthop: Initialize all fields in dumped nexthops

2024-08-03 08:49:50 +02:00

ping.c

ping: Fix potentail NULL deref for /proc/net/icmp.

2023-04-13 16:55:24 +02:00

proc.c

icmp: Add counters for rate limits

2024-10-17 15:21:27 +02:00

protocol.c

…

raw_diag.c

…

raw.c

ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels

2024-03-26 18:21:00 -04:00

route.c

ipv4: Fix incorrect source address in Record Route option

2024-08-03 08:49:49 +02:00

syncookies.c

tcp: fix cookie_init_timestamp() overflows

2023-11-20 11:51:54 +01:00

sysctl_net_ipv4.c

tcp: enforce receive buffer memory limits by allowing the tcp window to shrink

2023-10-19 23:08:54 +02:00

tcp_bbr.c

…

tcp_bic.c

…

tcp_bpf.c

tcp_bpf: fix return value of tcp_bpf_sendmsg()

2024-09-12 11:10:18 +02:00

tcp_cdg.c

…

tcp_cong.c

…

tcp_cubic.c

…

tcp_dctcp.c

tcp: Fix shift-out-of-bounds in dctcp_update_alpha().

2024-06-12 11:03:51 +02:00

tcp_dctcp.h

…

tcp_diag.c

…

tcp_fastopen.c

tcp: annotate data-races around fastopenq.max_qlen

2023-07-27 08:50:49 +02:00

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe

2024-10-17 15:22:19 +02:00

tcp_ipv4.c

tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process

2024-10-17 15:21:39 +02:00

tcp_lp.c

…

tcp_metrics.c

tcp_metrics: validate source addr length

2024-07-11 12:47:11 +02:00

tcp_minisocks.c

tcp: do not export tcp_twsk_purge()

2024-08-29 17:30:51 +02:00

tcp_nv.c

…

tcp_offload.c

net: drop bad gso csum_start and offset in virtio_net_hdr

2024-08-29 17:30:54 +02:00

tcp_output.c

tcp: annotate lockless access to sk->sk_err

2024-08-03 08:49:04 +02:00

tcp_rate.c

…

tcp_recovery.c

tcp: fix excessive TLP and RACK timeouts from HZ rounding

2023-10-25 12:03:06 +02:00

tcp_scalable.c

…

tcp_timer.c

tcp: fix race in tcp_write_err()

2024-08-03 08:49:04 +02:00

tcp_ulp.c

…

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: add tcp_done_with_error() helper

2024-08-03 08:49:04 +02:00

tunnel4.c

…

udp_bpf.c

…

udp_diag.c

…

udp_impl.h

…

udp_offload.c

gso: fix udp gso fraglist segmentation after pull from frag_list

2024-10-17 15:22:00 +02:00

udp_tunnel_core.c

udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO

2024-01-10 17:10:28 +01:00

udp_tunnel_nic.c

…

udp_tunnel_stub.c

…

udp.c

udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().

2024-07-18 13:18:35 +02:00

udplite.c

udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().

2023-05-30 14:03:20 +01:00

xfrm4_input.c

xfrm: Preserve vlan tags for transport mode software GRO

2024-05-17 11:56:10 +02:00

xfrm4_output.c

…

xfrm4_policy.c

…

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…