Minhong He 12324f00a8 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add ... [ Upstream commit 84967deee9 ] The seg6_genl_sethmac() directly uses the algorithm ID provided by the userspace without verifying whether it is an HMAC algorithm supported by the system. If an unsupported HMAC algorithm ID is configured, packets using SRv6 HMAC will be dropped during encapsulation or decapsulation. Fixes: 4f4853dc1c ("ipv6: sr: implement API to control SR HMAC structure") Signed-off-by: Minhong He <heminhong@kylinos.cn> Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com> Link: https://patch.msgid.link/20250815063845.85426-1-heminhong@kylinos.cn Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-08-28 16:26:18 +02:00
..
6lowpan
9p
802
8021q	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime	2025-07-24 08:51:53 +02:00
appletalk	net: appletalk: Fix use-after-free in AARP proxy probe	2025-08-15 12:04:47 +02:00
atm	atm: clip: Fix NULL pointer dereference in vcc_sendmsg()	2025-07-17 18:32:06 +02:00
ax25
batman-adv
bluetooth	Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()	2025-08-28 16:26:17 +02:00
bpf
bpfilter
bridge	net: bridge: fix soft lockup in br_multicast_query_expired()	2025-08-28 16:26:17 +02:00
caif	caif: reduce stack size, again	2025-08-15 12:04:56 +02:00
can	can: bcm: add missing rcu read protection for procfs content	2025-06-04 14:40:20 +02:00
ceph
core	net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM	2025-08-28 16:26:17 +02:00
dcb
dccp
devlink
dns_resolver
dsa	net: dsa: tag_brcm: legacy: fix pskb_may_pull length	2025-06-27 11:07:17 +01:00
ethernet
ethtool
hsr	net, hsr: reject HSR frame if skb can't hold tag	2025-08-28 16:26:09 +02:00
ieee802154
ife
ipv4	net: add netdev_lockdep_set_classes() to virtual drivers	2025-08-28 16:26:10 +02:00
ipv6	ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add	2025-08-28 16:26:18 +02:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc	llc: fix data loss when reading from a socket in llc_ui_recvmsg()	2025-06-04 14:40:21 +02:00
mac80211	wifi: mac80211: check basic rates validity in sta_link_apply_parameters	2025-08-28 16:26:16 +02:00
mac802154
mctp	net: mctp: Prevent duplicate binds	2025-08-28 16:25:55 +02:00
mpls	mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().	2025-06-27 11:07:39 +01:00
mptcp	mptcp: disable add_addr retransmission when timeout is 0	2025-08-28 16:26:16 +02:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-08-28 16:25:58 +02:00
netfilter	netfilter: ctnetlink: fix refcount leak on table dump	2025-08-28 16:25:51 +02:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-27 11:07:25 +01:00
netlink	netlink: avoid infinite retry looping in netlink_unicast()	2025-08-28 16:25:48 +02:00
netrom
nfc	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-27 11:07:29 +01:00
nsh
openvswitch	net: openvswitch: Fix the dead loop of MPLS parse	2025-06-27 11:07:12 +01:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-15 12:05:11 +02:00
phonet	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()	2025-07-24 08:51:48 +02:00
psample
qrtr
rds
rfkill
rose	rose: fix dangling neighbour pointers in rose_rt_device_down()	2025-07-10 15:59:48 +02:00
rxrpc	rxrpc: Fix oops due to non-existence of prealloc backlog struct	2025-07-17 18:32:06 +02:00
sched	net/sched: ets: use old 'nbands' while purging unused classes	2025-08-28 16:26:11 +02:00
sctp	sctp: Do not wake readers in __sctp_write_space()	2025-06-27 11:07:33 +01:00
smc	net/smc: use the correct ndev to find pnetid by pnetid table	2025-06-04 14:40:06 +02:00
strparser
sunrpc	SUNRPC: rpcbind should never reset the port to the value '0'	2025-06-04 14:40:03 +02:00
switchdev
tipc	tipc: Fix use-after-free in tipc_conn_close().	2025-07-17 18:32:05 +02:00
tls	tls: fix handling of zero-length records on the rx_list	2025-08-28 16:26:16 +02:00
unix	af_unix: Don't set -ECONNRESET for consumed OOB skb.	2025-07-06 10:58:00 +02:00
vmw_vsock	vsock/virtio: Validate length in packet header before skb_put()	2025-08-28 16:26:07 +02:00
wireless	wifi: cfg80211: reject HTC bit for management frames	2025-08-28 16:25:55 +02:00
x25
xdp
xfrm	xfrm: interface: fix use-after-free after changing collect_md xfrm interface	2025-08-15 12:04:46 +02:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile	af_unix: Remove CONFIG_UNIX_SCM.	2025-06-04 14:40:23 +02:00
socket.c
sysctl_net.c