Nicolas Dichtel 3f5413c954 ipv{4,6}/raw: fix output xfrm lookup wrt protocol ... [ Upstream commit 3632679d9e ] With a raw socket bound to IPPROTO_RAW (ie with hdrincl enabled), the protocol field of the flow structure, build by raw_sendmsg() / rawv6_sendmsg()), is set to IPPROTO_RAW. This breaks the ipsec policy lookup when some policies are defined with a protocol in the selector. For ipv6, the sin6_port field from 'struct sockaddr_in6' could be used to specify the protocol. Just accept all values for IPPROTO_RAW socket. For ipv4, the sin_port field of 'struct sockaddr_in' could not be used without breaking backward compatibility (the value of this field was never checked). Let's add a new kind of control message, so that the userland could specify which protocol is used. Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") CC: stable@vger.kernel.org Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Link: https://lore.kernel.org/r/20230522120820.1319391-1-nicolas.dichtel@6wind.com Signed-off-by: Paolo Abeni <pabeni@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-06-05 09:26:16 +02:00
..
6lowpan	…
9p	9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition	2023-04-20 12:35:08 +02:00
802	mrp: introduce active flags to prevent UAF when applicant uninit	2022-12-31 13:33:02 +01:00
8021q	vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()	2023-05-24 17:32:47 +01:00
appletalk	…
atm	…
ax25	…
batman-adv	…
bluetooth	Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp	2023-05-24 17:32:40 +01:00
bpf	Revert "bpf, test_run: fix &xdp_frame misplacement for LIVE_FRAMES"	2023-03-17 08:50:32 +01:00
bpfilter	…
bridge	bridge: always declare tunnel functions	2023-05-24 17:32:48 +01:00
caif	net: caif: Fix use-after-free in cfusbl_device_notify()	2023-03-17 08:50:24 +01:00
can	can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag	2023-05-24 17:32:49 +01:00
ceph	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
core	net: fix skb leak in __skb_tstamp_tx()	2023-05-30 14:03:20 +01:00
dcb	…
dccp	netfilter: keep conntrack reference until IPsecv6 policy checks are done	2023-05-11 23:03:18 +09:00
dns_resolver	…
dsa	net: dsa: tag_brcm: legacy: fix daisy-chained switches	2023-03-30 12:49:09 +02:00
ethernet	…
ethtool	ethtool: Fix uninitialized number of lanes	2023-05-17 11:53:37 +02:00
hsr	hsr: ratelimit only when errors are printed	2023-04-06 12:10:58 +02:00
ieee802154	…
ife	…
ipv4	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 09:26:16 +02:00
ipv6	ipv{4,6}/raw: fix output xfrm lookup wrt protocol	2023-06-05 09:26:16 +02:00
iucv	net/iucv: Fix size of interrupt data	2023-03-22 13:33:50 +01:00
kcm	…
key	af_key: Reject optional tunnel/BEET mode templates in outbound policies	2023-05-24 17:32:43 +01:00
l2tp	inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy().	2023-04-26 14:28:43 +02:00
l3mdev	…
lapb	…
llc	net: deal with most data-races in sk_wait_event()	2023-05-24 17:32:32 +01:00
mac80211	wifi: mac80211: Abort running color change when stopping the AP	2023-05-24 17:32:46 +01:00
mac802154	mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()	2022-12-05 09:53:08 +01:00
mctp	net: mctp: purge receive queues on sk destruction	2023-02-06 08:06:34 +01:00
mpls	net: mpls: fix stale pointer if allocation fails during device rename	2023-02-22 12:59:53 +01:00
mptcp	mptcp: fix accept vs worker race	2023-05-01 08:26:27 +09:00
ncsi	net/ncsi: clear Tx enable mode when handling a Config required AEN	2023-05-17 11:53:32 +02:00
netfilter	netfilter: nft_set_rbtree: fix null deref on element insertion	2023-05-24 17:32:48 +01:00
netlabel	…
netlink	netlink: annotate accesses to nlk->cb_running	2023-05-24 17:32:32 +01:00
netrom	netrom: Fix use-after-free caused by accept on already connected socket	2023-02-09 11:28:06 +01:00
nfc	nfc: change order inside nfc_se_io error path	2023-03-17 08:50:17 +01:00
nsh	net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()	2023-05-24 17:32:45 +01:00
openvswitch	net: openvswitch: fix race on port output	2023-04-20 12:35:09 +02:00
packet	net: add vlan_get_protocol_and_depth() helper	2023-05-24 17:32:32 +01:00
phonet	…
psample	…
qrtr	net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()	2023-04-20 12:35:09 +02:00
rds	rds: rds_rm_zerocopy_callback() correct order for list_add_tail()	2023-03-10 09:33:02 +01:00
rfkill	…
rose	net/rose: Fix to not accept on connected socket	2023-02-22 12:59:42 +01:00
rxrpc	rxrpc: Fix hard call timeout units	2023-05-17 11:53:35 +02:00
sched	net/sched: act_mirred: Add carrier check	2023-05-17 11:53:34 +02:00
sctp	inet: Add IP_LOCAL_PORT_RANGE socket option	2023-06-05 09:26:16 +02:00
smc	net/smc: Reset connection when trying to use SMCRv2 fails.	2023-05-30 14:03:33 +01:00
strparser	…
sunrpc	SUNRPC: Don't change task->tk_status after the call to rpc_exit_task	2023-05-30 14:03:17 +01:00
switchdev	…
tipc	tipc: check the bearer min mtu properly when setting it by netlink	2023-05-24 17:32:46 +01:00
tls	net: deal with most data-races in sk_wait_event()	2023-05-24 17:32:32 +01:00
unix	af_unix: Fix data races around sk->sk_shutdown.	2023-05-24 17:32:33 +01:00
vmw_vsock	vsock: avoid to close connected socket after the timeout	2023-05-24 17:32:44 +01:00
wireless	wifi: cfg80211: Drop entries with invalid BSSIDs in RNR	2023-05-24 17:32:46 +01:00
x25	net/x25: Fix to not accept on connected socket	2023-02-09 11:28:13 +01:00
xdp	xsk: Fix unaligned descriptor validation	2023-05-11 23:03:21 +09:00
xfrm	xfrm: Reject optional tunnel/BEET mode templates in outbound policies	2023-05-24 17:32:43 +01:00
Kconfig	…
Kconfig.debug	…
Makefile	…
compat.c	use less confusing names for iov_iter direction initializers	2023-02-09 11:28:04 +01:00
devres.c	…
socket.c	net: annotate sk->sk_err write from do_recvmmsg()	2023-05-24 17:32:32 +01:00
sysctl_net.c	…