Jason Wang 7063efd33b tuntap: fix use after free during release ...

After commit b196d88aba ("tun: fix use after free for ptr_ring") we
need clean up tx ring during release(). But unfortunately, it tries to
do the cleanup blindly after socket were destroyed which will lead
another use-after-free. Fix this by doing the cleanup before dropping
the last reference of the socket in __tun_detach().

Reported-by: Andrei Vagin <avagin@virtuozzo.com>
Acked-by: Andrei Vagin <avagin@virtuozzo.com>
Fixes: b196d88aba ("tun: fix use after free for ptr_ring")
Signed-off-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-05-16 14:53:10 -04:00

..

appletalk

…

arcnet

…

bonding

bonding: send learning packets for vlans on slave

2018-05-11 11:50:41 -04:00

caif

drivers/net: Use octal not symbolic permissions

2018-03-26 12:07:49 -04:00

can

can: hi311x: Work around TX complete interrupt erratum

2018-05-10 18:25:30 +02:00

dsa

net: dsa: bcm_sf2: Fix IPv6 rule half deletion

2018-05-16 14:11:22 -04:00

ethernet

qed: Fix LL2 race during connection terminate

2018-05-16 14:52:23 -04:00

fddi

…

fjes

…

hamradio

drivers/net: Use octal not symbolic permissions

2018-03-26 12:07:49 -04:00

hippi

…

hyperv

hv_netvsc: set master device

2018-05-10 17:36:20 -04:00

ieee802154

net: ieee802154: mcr20a: do not leak resources on error path

2018-04-23 20:56:23 +02:00

ipvlan

ipvlan: call netdevice notifier when master mac address changed

2018-05-16 11:59:41 -04:00

netdevsim

devlink: convert occ_get op to separate registration

2018-04-08 12:45:57 -04:00

phy

net: phy: micrel: add 125MHz reference clock workaround

2018-05-16 12:20:03 -04:00

plip

…

ppp

pppoe: check sockaddr length in pppoe_connect()

2018-04-23 21:12:15 -04:00

slip

slip: Check if rstate is initialized before uncompressing

2018-04-11 10:33:46 -04:00

team

team: fix netconsole setup over team

2018-04-24 09:36:21 -04:00

usb

qmi_wwan: do not steal interfaces from class drivers

2018-05-03 11:25:03 -04:00

vmxnet3

vmxnet3: use DMA memory barriers where required

2018-05-14 22:43:57 -04:00

wan

…

wimax

net: drivers/net: Remove unnecessary skb_copy_expand OOM messages

2018-03-15 14:28:03 -04:00

wireless

Merge tag 'mac80211-for-davem-2018-05-09' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

2018-05-10 17:34:50 -04:00

xen-netback

drivers/net: Use octal not symbolic permissions

2018-03-26 12:07:49 -04:00

dummy.c

net: Do not take net_rwsem in __rtnl_link_unregister()

2018-03-31 22:24:58 -04:00

eql.c

…

geneve.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

gtp.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

ifb.c

net: Do not take net_rwsem in __rtnl_link_unregister()

2018-03-31 22:24:58 -04:00

Kconfig

netdevsim: Add simple FIB resource controller via devlink

2018-03-29 14:10:31 -04:00

LICENSE.SRC

…

loopback.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

macsec.c

Revert "macsec: missing dev_put() on error in macsec_newlink()"

2018-04-16 10:01:12 -04:00

macvlan.c

macvlan: filter out unsupported feature flags

2018-03-11 22:46:16 -04:00

macvtap.c

…

Makefile

net: remove cris etrax ethernet driver

2018-03-26 15:56:24 +02:00

mdio.c

…

mii.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

net/mac89x0: Convert to platform_driver

2018-03-01 21:21:36 -05:00

sungem_phy.c

…

tap.c

…

thunderbolt.c

…

tun.c

tuntap: fix use after free during release

2018-05-16 14:53:10 -04:00

veth.c

…

virtio_net.c

virtio_net: sparse annotation fix

2018-04-19 16:33:20 -04:00

vrf.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2018-04-01 19:49:34 -04:00

vsockmon.c

…

vxlan.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

xen-netfront.c

drivers/net: Use octal not symbolic permissions

2018-03-26 12:07:49 -04:00