Jakub Kicinski 7a3ca06d04 tls: fix race between async notify and socket close ... [ Upstream commit aec7961916f3f9e88766e2688992da6980f11b8d ] The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touching already freed data. Try to avoid the locking and extra flags altogether. Have the main thread hold an extra reference, this way we can depend solely on the atomic ref counter for synchronization. Don't futz with reiniting the completion, either, we are now tightly controlling when completion fires. Reported-by: valis <sec@valis.email> Fixes: 0cada33241 ("net/tls: fix race condition causing kernel panic") Signed-off-by: Jakub Kicinski <kuba@kernel.org> Reviewed-by: Simon Horman <horms@kernel.org> Reviewed-by: Eric Dumazet <edumazet@google.com> Reviewed-by: Sabrina Dubroca <sd@queasysnail.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2024-02-23 09:12:31 +01:00
..
9p	…
bluetooth	Bluetooth: Fix bogus check for re-auth no supported with non-ssp	2024-01-25 15:27:30 -08:00
caif	…
iucv	…
netfilter	netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV	2024-02-05 20:13:01 +00:00
netns	xfrm: fix a data-race in xfrm_gen_index()	2023-10-25 12:03:06 +02:00
nfc	…
phonet	…
sctp	sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop	2023-03-11 13:55:26 +01:00
tc_act	net/sched: transition act_pedit to rcu and percpu stats	2023-03-11 13:55:28 +01:00
6lowpan.h	…
Space.h	…
act_api.h	…
addrconf.h	net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX	2023-12-20 17:00:15 +01:00
af_ieee802154.h	…
af_rxrpc.h	…
af_unix.h	af_unix: fix lockdep positive in sk_diag_dump_icons()	2024-02-05 20:13:02 +00:00
af_vsock.h	…
ah.h	…
amt.h	…
arp.h	neighbour: switch to standard rcu, instead of rcu_bh	2023-10-10 22:00:42 +02:00
atmclip.h	…
ax25.h	…
ax88796.h	…
bareudp.h	…
bond_3ad.h	…
bond_alb.h	bonding (gcc13): synchronize bond_{a,t}lb_xmit() types	2023-05-11 23:03:41 +09:00
bond_options.h	…
bonding.h	bonding: fix macvlan over alb bond support	2023-08-30 16:11:04 +02:00
bpf_sk_storage.h	…
busy_poll.h	…
calipso.h	…
cfg80211-wext.h	…
cfg80211.h	wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush()	2023-11-20 11:52:18 +01:00
cfg802154.h	…
checksum.h	…
cipso_ipv4.h	…
cls_cgroup.h	…
codel.h	…
codel_impl.h	…
codel_qdisc.h	…
compat.h	…
datalink.h	…
dcbevent.h	…
dcbnl.h	…
devlink.h	…
dropreason.h	…
dsa.h	…
dsfield.h	…
dst.h	net: add atomic_long_t to net_device_stats fields	2022-12-31 13:33:02 +01:00
dst_cache.h	…
dst_metadata.h	…
dst_ops.h	ipv6: remove max_size check inline with ipv4	2024-01-15 18:54:51 +01:00
erspan.h	…
esp.h	…
espintcp.h	…
ethoc.h	…
failover.h	…
fib_notifier.h	…
fib_rules.h	…
firewire.h	…
flow.h	inet: shrink struct flowi_common	2023-11-20 11:52:15 +01:00
flow_dissector.h	…
flow_offload.h	…
fou.h	…
fq.h	…
fq_impl.h	…
garp.h	…
gen_stats.h	…
genetlink.h	drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group	2023-12-13 18:39:12 +01:00
geneve.h	…
gre.h	…
gro.h	…
gro_cells.h	…
gtp.h	…
gue.h	…
hwbm.h	…
icmp.h	…
ieee80211_radiotap.h	…
ieee802154_netdev.h	…
if_inet6.h	net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX	2023-12-20 17:00:15 +01:00
ife.h	…
ila.h	…
inet6_connection_sock.h	…
inet6_hashtables.h	…
inet_common.h	ipv4, ipv6: Use splice_eof() to flush	2024-01-10 17:10:27 +01:00
inet_connection_sock.h	tcp: make sure init the accept_queue's spinlocks once	2024-01-31 16:17:03 -08:00
inet_dscp.h	…
inet_ecn.h	…
inet_frag.h	…
inet_hashtables.h	tcp: Add TIME_WAIT sockets in bhash2.	2023-01-12 12:02:15 +01:00
inet_sock.h	udp: fix busy polling	2024-01-31 16:17:04 -08:00
inet_timewait_sock.h	tcp: Add TIME_WAIT sockets in bhash2.	2023-01-12 12:02:15 +01:00
inetpeer.h	…
ioam6.h	…
ip.h	ipmr: fix kernel panic when forwarding mcast packets	2024-02-05 20:13:00 +00:00
ip6_checksum.h	…
ip6_fib.h	ipv6: Remove in6addr_any alternatives.	2023-09-19 12:28:10 +02:00
ip6_route.h	…
ip6_tunnel.h	…
ip_fib.h	ipv4/fib: send notify when delete source address routes	2023-10-25 12:03:11 +02:00
ip_tunnels.h	ip_tunnels: use DEV_STATS_INC()	2023-09-19 12:28:03 +02:00
ip_vs.h	ipvs: Update width of source for ip_vs_sync_conn_options	2023-05-24 17:32:39 +01:00
ipcomp.h	…
ipconfig.h	…
ipv6.h	tcp: Fix bind() regression for v4-mapped-v6 wildcard address.	2023-09-19 12:28:10 +02:00
ipv6_frag.h	…
ipv6_stubs.h	…
iw_handler.h	…
kcm.h	…
l3mdev.h	…
lag.h	…
lapb.h	…
lib80211.h	…
llc.h	…
llc_c_ac.h	…
llc_c_ev.h	…
llc_c_st.h	…
llc_conn.h	…
llc_if.h	…
llc_pdu.h	llc: Drop support for ETH_P_TR_802_2.	2024-01-31 16:17:04 -08:00
llc_s_ac.h	…
llc_s_ev.h	…
llc_s_st.h	…
llc_sap.h	…
lwtunnel.h	lwt: Check LWTUNNEL_XMIT_CONTINUE strictly	2023-09-13 09:42:33 +02:00
mac80211.h	mac80211: make ieee80211_tx_info padding explicit	2023-09-13 09:42:34 +02:00
mac802154.h	…
macsec.h	net: macsec: indicate next pn update when offloading	2023-10-19 23:08:53 +02:00
mctp.h	…
mctpdevice.h	…
mip6.h	…
mld.h	…
mpls.h	…
mpls_iptunnel.h	…
mptcp.h	mptcp: remove MPTCP 'ifdef' in TCP SYN cookies	2023-01-07 11:11:44 +01:00
mrp.h	mrp: introduce active flags to prevent UAF when applicant uninit	2022-12-31 13:33:02 +01:00
ncsi.h	…
ndisc.h	neighbour: switch to standard rcu, instead of rcu_bh	2023-10-10 22:00:42 +02:00
neighbour.h	neighbour: fix data-races around n->output	2023-10-10 22:00:42 +02:00
net_debug.h	…
net_failover.h	…
net_namespace.h	…
net_ratelimit.h	…
net_trackers.h	…
netevent.h	…
netlabel.h	…
netlink.h	netlink: split up copies in the ack construction	2023-10-10 22:00:44 +02:00
netprio_cgroup.h	…
netrom.h	…
nexthop.h	ipv6: remove nexthop_fib6_nh_bh()	2023-10-10 22:00:46 +02:00
nl802154.h	…
nsh.h	…
p8022.h	…
page_pool.h	page_pool: fix inconsistency for page_pool_ring_[un]lock()	2023-06-05 09:26:20 +02:00
pie.h	…
ping.h	net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294	2023-06-14 11:15:16 +02:00
pkt_cls.h	…
pkt_sched.h	net/sched: make psched_mtu() RTNL-less safe	2023-07-23 13:49:27 +02:00
pptp.h	…
protocol.h	…
psample.h	…
psnap.h	…
raw.h	raw: Fix NULL deref in raw_get_next().	2023-04-13 16:55:23 +02:00
rawv6.h	…
red.h	…
regulatory.h	wifi: cfg80211: fix regulatory disconnect with OCB/NAN	2023-07-19 16:21:10 +02:00
request_sock.h	…
rose.h	…
route.h	net: annotate data-races around sk->sk_mark	2023-08-11 12:08:14 +02:00
rpl.h	ipv6: rpl: Fix Route of Death.	2023-06-14 11:15:20 +02:00
rsi_91x.h	…
rtnetlink.h	net: validate veth and vxcan peer ifindexes	2023-08-30 16:11:02 +02:00
rtnh.h	…
sch_generic.h	net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting	2023-06-21 16:01:01 +02:00
scm.h	scm: fix MSG_CTRUNC setting condition for SO_PASSSEC	2023-05-11 23:03:18 +09:00
secure_seq.h	…
seg6.h	…
seg6_hmac.h	…
seg6_local.h	…
selftests.h	…
slhc_vj.h	…
smc.h	…
snmp.h	…
sock.h	udp: fix busy polling	2024-01-31 16:17:04 -08:00
sock_reuseport.h	soreuseport: Fix socket selection for SO_INCOMING_CPU.	2022-12-31 13:32:04 +01:00
stp.h	…
strparser.h	…
switchdev.h	…
tcp.h	ipv4, ipv6: Use splice_eof() to flush	2024-01-10 17:10:27 +01:00
tcp_states.h	…
timewait_sock.h	…
tipc.h	…
tls.h	tls: fix race between async notify and socket close	2024-02-23 09:12:31 +01:00
tls_toe.h	…
transp_v6.h	…
tso.h	…
tun_proto.h	…
udp.h	ipv4, ipv6: Use splice_eof() to flush	2024-01-10 17:10:27 +01:00
udp_tunnel.h	udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO	2024-01-10 17:10:28 +01:00
udplite.h	…
vsock_addr.h	…
vxlan.h	vxlan: Fix nexthop hash size	2023-08-11 12:08:17 +02:00
wext.h	…
x25.h	…
x25device.h	…
xdp.h	…
xdp_priv.h	…
xdp_sock.h	…
xdp_sock_drv.h	…
xfrm.h	xfrm: Treat already-verified secpath entries as optional	2023-06-28 11:12:28 +02:00
xsk_buff_pool.h	xsk: Fix unaligned descriptor validation	2023-05-11 23:03:21 +09:00