Pablo Neira Ayuso 3561f4d12f netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified ...

commit 1b6345d4160ecd3d04bd8cd75df90c67811e8cc9 upstream.

Since f3a2181e16f1 ("netfilter: nf_tables: Support for sets with
multiple ranged fields"), it possible to combine intervals and
concatenations. Later on, ef516e8625dd ("netfilter: nf_tables:
reintroduce the NFT_SET_CONCAT flag") provides the NFT_SET_CONCAT flag
for userspace to report that the set stores a concatenation.

Make sure NFT_SET_CONCAT is set on if field_count is specified for
consistency. Otherwise, if NFT_SET_CONCAT is specified with no
field_count, bail out with EINVAL.

Fixes: ef516e8625dd ("netfilter: nf_tables: reintroduce the NFT_SET_CONCAT flag")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-08-25 11:38:06 +02:00

..

6lowpan

6lowpan: iphc: Fix an off-by-one check of array index

2021-09-15 09:50:34 +02:00

9p

net/9p: Initialize the iounit field during fid creation

2022-08-21 15:16:26 +02:00

802

net/802/garp: fix memleak in garp_request_join()

2021-07-31 08:16:11 +02:00

8021q

net: make free_netdev() more lenient with unregistering devices

2022-07-29 17:19:07 +02:00

appletalk

appletalk: Fix skb allocation size in loopback case

2021-04-07 15:00:08 +02:00

atm

net: atm: fix update of position index in lec_seq_next

2020-10-31 12:26:30 -07:00

ax25

net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg

2022-06-22 14:13:17 +02:00

batman-adv

batman-adv: Don't skb_split skbuffs with frag_list

2022-05-18 10:23:42 +02:00

bluetooth

Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression

2022-08-21 15:16:26 +02:00

bpf

bpf: Add PROG_TEST_RUN support for sk_lookup programs

2022-08-03 12:00:52 +02:00

bpfilter

bpfilter: Specify the log level for the kmsg message

2021-07-14 16:56:29 +02:00

bridge

netfilter: br_netfilter: do not skip all hooks with 0 priority

2022-07-21 21:20:13 +02:00

caif

net-caif: avoid user-triggerable WARN_ON(1)

2021-09-22 12:27:56 +02:00

can

can: bcm: use call_rcu() instead of costly synchronize_rcu()

2022-07-12 16:32:16 +02:00

ceph

libceph: fix potential use-after-free on linger ping and resends

2022-05-25 09:17:56 +02:00

core

devlink: Fix use-after-free after a failed reload

2022-08-25 11:37:57 +02:00

dcb

net: dcb: disable softirqs in dcbnl_flush_dev()

2022-03-08 19:09:37 +01:00

dccp

dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock

2022-08-21 15:15:52 +02:00

decnet

net: decnet: Fix sleeping inside in af_decnet

2021-07-28 14:35:38 +02:00

dns_resolver

…

dsa

net: dsa: Add missing of_node_put() in dsa_port_link_register_of

2022-05-09 09:05:02 +02:00

ethernet

…

ethtool

ethtool: do not perform operations on net devices being unregistered

2021-12-17 10:14:41 +01:00

hsr

net: hsr: fix mac_len checks

2021-06-03 09:00:50 +02:00

ieee802154

net: ieee802154: Return meaningful error codes from the netlink helpers

2022-02-08 18:30:37 +01:00

ife

…

ipv4

tcp: fix over estimation in sk_forced_mem_schedule()

2022-08-21 15:16:25 +02:00

ipv6

ipv6: do not use RT_TOS for IPv6 flowlabel

2022-08-25 11:37:59 +02:00

iucv

net/af_iucv: remove WARN_ONCE on malformed RX packets

2021-03-07 12:34:05 +01:00

kcm

net: pass a sockptr_t into ->setsockopt

2020-07-24 15:41:54 -07:00

key

Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"

2022-06-14 18:32:43 +02:00

l2tp

ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg

2022-06-22 14:13:15 +02:00

l3mdev

l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu

2022-04-27 13:53:50 +02:00

lapb

net: lapb: Copy the skb before sending a packet

2021-02-10 09:29:14 +01:00

llc

llc: only change llc->dev when bind() succeeds

2022-03-28 09:57:10 +02:00

mac80211

mac80211: fix a memory leak where sta_info is not freed

2022-08-21 15:16:25 +02:00

mac802154

net: mac802154: Fix general protection fault

2021-04-14 08:42:13 +02:00

mpls

net: mpls: Fix notifications when deleting a device

2021-12-08 09:03:23 +01:00

mptcp

tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf.

2022-08-03 12:00:45 +02:00

ncsi

net/ncsi: check for error return from call to nla_put_u32

2022-01-05 12:40:32 +01:00

netfilter

netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified

2022-08-25 11:38:06 +02:00

netlabel

netlabel: fix out-of-bounds memory accesses

2022-04-13 21:01:00 +02:00

netlink

netlink: do not reset transport header in netlink_recvmsg()

2022-05-18 10:23:43 +02:00

netrom

netrom: fix api breakage in nr_setsockopt()

2022-01-27 10:54:03 +01:00

nfc

NFC: NULL out the dev->rfkill to prevent UAF

2022-06-09 10:21:01 +02:00

nsh

…

openvswitch

net: openvswitch: fix parsing of nw_proto for IPv6 fragments

2022-06-29 08:59:45 +02:00

packet

net/packet: fix packet_sock xmit return value checking

2022-04-27 13:53:50 +02:00

phonet

phonet: refcount leak in pep_sock_accep

2022-01-11 15:25:01 +01:00

psample

net: psample: Fix netlink skb length with tunnel info

2021-03-07 12:34:07 +01:00

qrtr

net: qrtr: fix another OOB Read in qrtr_endpoint_post

2021-09-03 10:09:21 +02:00

rds

rds: add missing barrier to release_refill

2022-08-25 11:37:49 +02:00

rfkill

rfkill: Fix use-after-free in rfkill_resume()

2020-11-12 09:18:06 +01:00

rose

net: rose: fix netdev reference changes

2022-08-21 15:15:51 +02:00

rxrpc

rxrpc: Fix decision on when to generate an IDLE ACK

2022-06-09 10:21:12 +02:00

sched

net_sched: cls_route: disallow handle of 0

2022-08-21 15:16:26 +02:00

sctp

sctp: leave the err path free in sctp_stream_init to sctp_stream_free

2022-08-03 12:00:49 +02:00

smc

tcp: Fix data-races around keepalive sysctl knobs.

2022-07-29 17:19:16 +02:00

strparser

bpf: sockmap, strparser, and tls are reusing qdisc_skb_cb and colliding

2021-11-18 14:04:27 +01:00

sunrpc

SUNRPC: Reinitialise the backchannel request buffers before reuse

2022-08-25 11:37:56 +02:00

switchdev

net: switchdev: don't set port_obj_info->handled true when -EOPNOTSUPP

2021-02-07 15:37:12 +01:00

tipc

net: tipc: fix possible refcount leak in tipc_sk_create()

2022-07-21 21:20:14 +02:00

tls

net/tls: Remove the context from the list in tls_device_down

2022-08-03 12:00:46 +02:00

unix

af_unix: Fix a data-race in unix_dgram_peer_wake_me().

2022-06-14 18:32:40 +02:00

vmw_vsock

vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()

2022-08-25 11:37:59 +02:00

wimax

genetlink: move to smaller ops wherever possible

2020-10-02 19:11:11 -07:00

wireless

cfg80211: declare MODULE_FIRMWARE for regulatory.db

2022-06-09 10:21:26 +02:00

x25

net/x25: Fix null-ptr-deref caused by x25_disconnect

2022-04-08 14:40:30 +02:00

xdp

xsk: Clear page contiguity bit when unmapping pool

2022-07-12 16:32:21 +02:00

xfrm

ip: Fix data-races around sysctl_ip_no_pmtu_disc.

2022-07-29 17:19:12 +02:00

compat.c

net: Return the correct errno code

2021-06-18 10:00:06 +02:00

devres.c

…

Kconfig

drop_monitor: Convert to using devlink tracepoint

2020-09-30 18:01:26 -07:00

Makefile

…

socket.c

ethtool: improve compat ioctl handling

2021-09-18 13:40:21 +02:00

sysctl_net.c

…