| commit | 5e17cd9189aae1306f456b5edf6207cbf46acd91 | [log] [tgz] |
|---|---|---|
| author | Eric Dumazet <[email protected]> | Fri Feb 07 13:58:35 2025 +0000 |
| committer | Shuo Yang <[email protected]> | Sun Mar 30 01:48:02 2025 -0700 |
| tree | 6283d8fdf26618614aa54c211f1b0ecf6ca1861a | |
| parent | a6581f8c6b03a28ee7212e0a3f64ea58cf10a585 [diff] |
neighbour: use RCU protection in __neigh_notify()
[ Upstream commit becbd5850c03ed33b232083dd66c6e38c0c0e569 ]
__neigh_notify() can be called without RTNL or RCU protection.
Use RCU protection to avoid potential UAF.
BUG=b/405561241
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2025-21763 in the Linux kernel.
cos-patch: security-high
Fixes: 426b5303eb43 ("[NETNS]: Modify the neighbour table code so it handles multiple network namespaces")
Change-Id: I8fee291e3781d5b619f01d2d8def4b4636872907
Signed-off-by: Eric Dumazet <[email protected]>
Reviewed-by: David Ahern <[email protected]>
Reviewed-by: Kuniyuki Iwashima <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Signed-off-by: Sasha Levin <[email protected]>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/97660
Reviewed-by: Kevin Berry <[email protected]>
Tested-by: Cusky Presubmit Bot <[email protected]>