You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Eric Dumazet e0e3cea46d af_netlink: force credentials passing [CVE-2012-3520] ... Pablo Neira Ayuso discovered that avahi and potentially NetworkManager accept spoofed Netlink messages because of a kernel bug. The kernel passes all-zero SCM_CREDENTIALS ancillary data to the receiver if the sender did not provide such data, instead of not including any such data at all or including the correct data from the peer (as it is the case with AF_UNIX). This bug was introduced in commit 16e5726269 (af_unix: dont send SCM_CREDENTIALS by default) This patch forces passing credentials for netlink, as before the regression. Another fix would be to not add SCM_CREDENTIALS in netlink messages if not provided by the sender, but it might break some programs. With help from Florian Weimer & Petr Matousek This issue is designated as CVE-2012-3520 Signed-off-by: Eric Dumazet <edumazet@google.com> Cc: Petr Matousek <pmatouse@redhat.com> Cc: Florian Weimer <fweimer@redhat.com> Cc: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: David S. Miller <davem@davemloft.net>		13 years ago
..
9p	…
bluetooth	Bluetooth: Use tx window from config response for ack timing	13 years ago
caif	caif-hsi: Remove use of module parameters	13 years ago
irda	…
iucv	af_iucv: add shutdown for HS transport	13 years ago
netfilter	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	13 years ago
netns	ipv4: remove rt_cache_rebuild_count	13 years ago
nfc	NFC: Allow HCI driver to pre-open pipes to some gates	13 years ago
phonet	net: remove my future former mail address	13 years ago
sctp	sctp: Implement quick failover draft from tsvwg	13 years ago
tc_act	…
act_api.h	…
addrconf.h	ipv6: add ipv6_addr_hash() helper	13 years ago
af_ieee802154.h	…
af_rxrpc.h	…
af_unix.h	af_unix: speedup /proc/net/unix	13 years ago
ah.h	…
arp.h	ipv4: Fix neigh lookup keying over loopback/point-to-point devices.	13 years ago
atmclip.h	…
ax25.h	net ax25: Fix the build when sysctl support is disabled.	13 years ago
ax88796.h	…
cfg80211-wext.h	…
cfg80211.h	cfg80211: add channel flag to prohibit OFDM operation	13 years ago
checksum.h	…
cipso_ipv4.h	cipso: handle CIPSO options correctly when NetLabel is disabled	13 years ago
cls_cgroup.h	…
codel.h	codel: refine one condition to avoid a nul rec_inv_sqrt	13 years ago
compat.h	net: cleanup unsigned to unsigned int	13 years ago
datalink.h	…
dcbevent.h	…
dcbnl.h	net/dcb: Add an optional max rate attribute	13 years ago
dn.h	net: cleanup unsigned to unsigned int	13 years ago
dn_dev.h	…
dn_fib.h	net: cleanup unsigned to unsigned int	13 years ago
dn_neigh.h	…
dn_nsp.h	…
dn_route.h	decnet: Use neighbours privately in dn_route struct.	13 years ago
dsa.h	…
dsfield.h	…
dst.h	net: force dst_default_metrics to const section	13 years ago
dst_ops.h	net: Fix warnings in dst_ops.h	13 years ago
esp.h	…
ethoc.h	…
fib_rules.h	ipv4: Elide fib_validate_source() completely when possible.	13 years ago
flow.h	ipv4: Kill FLOWI_FLAG_RT_NOCACHE and associated code.	13 years ago
flow_keys.h	…
garp.h	…
gen_stats.h	…
genetlink.h	net: Use NLMSG_DEFAULT_SIZE in combination with nlmsg_new()	13 years ago
gre.h	…
icmp.h	net: cleanup unsigned to unsigned int	13 years ago
ieee80211_radiotap.h	…
ieee802154.h	…
ieee802154_netdev.h	mac802154: declare reduced mlme operations	13 years ago
if_inet6.h	net: delete all instances of special processing for token ring	13 years ago
inet6_connection_sock.h	ipv6: Add helper inet6_csk_update_pmtu().	13 years ago
inet6_hashtables.h	ipv6: Early TCP socket demux	13 years ago
inet_common.h	net-tcp: Fast Open client - sendmsg(MSG_FASTOPEN)	13 years ago
inet_connection_sock.h	net: ipv6: fix TCP early demux	13 years ago
inet_ecn.h	…
inet_frag.h	ip_frag: struct inet_frags match() method returns a bool	13 years ago
inet_hashtables.h	ipv4: Early TCP socket demux.	13 years ago
inet_sock.h	net: ipv6: fix TCP early demux	13 years ago
inet_timewait_sock.h	…
inetpeer.h	ipv4: Maintain redirect and PMTU info in struct rtable again.	13 years ago
ip.h	ipv4: fix ip_send_skb()	13 years ago
ip6_checksum.h	…
ip6_fib.h	ipv6: Store route neighbour in rt6_info struct.	13 years ago
ip6_route.h	ipv6: fix inet6_csk_xmit()	13 years ago
ip6_tunnel.h	ipv6_tunnel: Allow receiving packets on the fallback tunnel if they pass sanity checks	13 years ago
ip_fib.h	ipv4: Cache routes in nexthop exception entries.	13 years ago
ip_vs.h	ipvs: fix oops on NAT reply in br_nf context	13 years ago
ipcomp.h	…
ipconfig.h	…
ipip.h	tunnel: implement 64 bits statistics	13 years ago
ipv6.h	ipv6: add ipv6_addr_hash() helper	13 years ago
ipx.h	…
iw_handler.h	…
lapb.h	lapb: Neaten debugging	13 years ago
lib80211.h	…
llc.h	llc2: Fix silent failure of llc_station_init()	13 years ago
llc_c_ac.h	…
llc_c_ev.h	net: cleanup unsigned to unsigned int	13 years ago
llc_c_st.h	…
llc_conn.h	…
llc_if.h	…
llc_pdu.h	net: delete all instances of special processing for token ring	13 years ago
llc_s_ac.h	…
llc_s_ev.h	…
llc_s_st.h	…
llc_sap.h	…
mac80211.h	mac80211: add time synchronisation with BSS for assoc	13 years ago
mac802154.h	mac802154: add wpan device-class support	13 years ago
mip6.h	…
mld.h	…
ndisc.h	ipv6: Export ndisc option parsing from ndisc.c	13 years ago
neighbour.h	net: Do delayed neigh confirmation.	13 years ago
net_namespace.h	net: make sock diag per-namespace	13 years ago
net_ratelimit.h	…
netdma.h	…
netevent.h	net: Pass neighbours and dest address into NETEVENT_REDIRECT events.	13 years ago
netlabel.h	…
netlink.h	netlink: Delete all NLA_PUT*() macros.	13 years ago
netprio_cgroup.h	net: netprio_cgroup: rework update socket logic	13 years ago
netrom.h	…
nexthop.h	…
nl802154.h	…
p8022.h	…
ping.h	…
pkt_cls.h	…
pkt_sched.h	net: cleanup unsigned to unsigned int	13 years ago
protocol.h	ipv6: Early TCP socket demux	13 years ago
psnap.h	…
raw.h	…
rawv6.h	ipv6: bool/const conversions phase2	13 years ago
red.h	net_sched: red: Make minor corrections to comments	13 years ago
regulatory.h	cfg80211: add cellular base station regulatory hint support	13 years ago
request_sock.h	…
rose.h	…
route.h	ipv4: Properly purge netdev references on uncached routes.	13 years ago
rtnetlink.h	rtnl: allow to specify different num for rx and tx queue count	13 years ago
sch_generic.h	net: rename bond_queue_mapping to slave_dev_queue_mapping	13 years ago
scm.h	af_netlink: force credentials passing [CVE-2012-3520]	13 years ago
secure_seq.h	…
slhc_vj.h	…
snmp.h	…
sock.h	tcp: Apply device TSO segment limit earlier	13 years ago
stp.h	…
tcp.h	net: tcp: ipv6_mapped needs sk_rx_dst_set method	13 years ago
tcp_memcontrol.h	cgroup: pass struct mem_cgroup instead of struct cgroup to socket memcg	13 years ago
tcp_states.h	…
timewait_sock.h	[PATCH] tcp: Cache inetpeer in timewait socket, and only when necessary.	13 years ago
transp_v6.h	…
udp.h	net/ipv6/udp: UDP encapsulation: introduce encap_rcv hook into IPv6	13 years ago
udplite.h	net: ipv4: Standardize prefixes for message logging	13 years ago
wext.h	…
wimax.h	net: cleanup unsigned to unsigned int	13 years ago
wpan-phy.h	mac802154: monitor device support	13 years ago
x25.h	net: cleanup unsigned to unsigned int	13 years ago
x25device.h	…
xfrm.h	net: ipv6: fix oops in inet_putpeer()	13 years ago