Pavel Tikhomirov 0af8c09c89 netfilter: x_tables: fix percpu counter block leak on error path when creating new netns ... Here is the stack where we allocate percpu counter block: +-< __alloc_percpu +-< xt_percpu_counter_alloc +-< find_check_entry # {arp,ip,ip6}_tables.c +-< translate_table And it can be leaked on this code path: +-> ip6t_register_table +-> translate_table # allocates percpu counter block +-> xt_register_table # fails there is no freeing of the counter block on xt_register_table fail. Note: xt_percpu_counter_free should be called to free it like we do in do_replace through cleanup_entry helper (or in __ip6t_unregister_table). Probability of hitting this error path is low AFAICS (xt_register_table can only return ENOMEM here, as it is not replacing anything, as we are creating new netns, and it is hard to imagine that all previous allocations succeeded and after that one in xt_register_table failed). But it's worth fixing even the rare leak. Fixes: 71ae0dff02 ("netfilter: xtables: use percpu rule counters") Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2023-02-22 10:11:27 +01:00
..
6lowpan
9p	xen: branch for v6.2-rc4	2023-01-12 17:02:20 -06:00
802	treewide: Convert del_timer*() to timer_shutdown*()	2022-12-25 13:38:09 -08:00
8021q	net: Remove the obsolte u64_stats_fetch_*_irq() users (net).	2022-10-28 20:13:54 -07:00
appletalk
atm	driver core: make struct class.dev_uevent() take a const *	2022-11-24 17:12:15 +01:00
ax25	ax25: af_ax25: Remove unnecessary (void*) conversions	2022-11-16 13:31:03 +00:00
batman-adv	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
bluetooth	Bluetooth: Fix possible deadlock in rfcomm_sk_state_change	2023-01-17 15:59:02 -08:00
bpf	New Feature:	2022-12-17 14:06:53 -06:00
bpfilter
bridge	netfilter: ebtables: fix table blob use-after-free	2023-02-22 00:22:31 +01:00
caif	caif: fix memory leak in cfctrl_linkup_request()	2023-01-05 10:19:36 +01:00
can	can: isotp: split tx timer into transmission and timeout	2023-02-02 10:33:26 +01:00
ceph	Treewide: Stop corrupting socket's task_frag	2022-12-19 17:28:49 -08:00
core	neigh: make sure used and confirmed times are valid	2023-02-06 08:44:31 +00:00
dcb	net: dcb: move getapptrust to separate function	2022-11-15 15:27:43 +01:00
dccp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-11-29 13:04:52 -08:00
dns_resolver	cred: Do not default to init_cred in prepare_kernel_cred()	2022-11-01 10:04:52 -07:00
dsa	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-12-13 09:49:29 +01:00
ethernet	net: ethernet: use sysfs_emit() to instead of scnprintf()	2022-12-07 20:02:44 -08:00
ethtool	Revert "Merge branch 'ethtool-mac-merge'"	2023-01-24 17:44:14 +01:00
hsr	hsr: Use a single struct for self_node.	2022-12-01 20:26:22 -08:00
ieee802154	Merge tag 'ieee802154-for-net-next-2022-12-05' of git://git.kernel.org/pub/scm/linux/kernel/git/sschmidt/wpan-next	2022-12-07 17:33:26 -08:00
ife
ipv4	netfilter: x_tables: fix percpu counter block leak on error path when creating new netns	2023-02-22 10:11:27 +01:00
ipv6	netfilter: x_tables: fix percpu counter block leak on error path when creating new netns	2023-02-22 10:11:27 +01:00
iucv
kcm	kcm: close race conditions on sk_receive_queue	2022-11-15 12:42:26 +01:00
key	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2022-11-29 20:50:51 -08:00
l2tp	l2tp: prevent lockdep issue in l2tp_tunnel_register()	2023-01-18 14:44:54 +00:00
l3mdev
lapb
llc
mac80211	Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"	2023-01-16 17:28:52 +02:00
mac802154	mac802154: Fix possible double free upon parsing error	2022-12-19 11:38:12 +01:00
mctp	net: mctp: purge receive queues on sk destruction	2023-01-28 00:26:09 -08:00
mpls	net: Remove the obsolte u64_stats_fetch_*_irq() users (net).	2022-10-28 20:13:54 -07:00
mptcp	mptcp: netlink: respect v4/v6-only sockets	2023-01-13 21:55:45 -08:00
ncsi	net/ncsi: Silence runtime memcpy() false positive warning	2022-12-06 17:29:14 -08:00
netfilter	netfilter: ctnetlink: make event listener tracking global	2023-02-22 00:28:47 +01:00
netlabel
netlink	netlink: annotate data races around sk_state	2023-01-23 21:35:53 -08:00
netrom	netrom: Fix use-after-free caused by accept on already connected socket	2023-01-30 07:30:47 +00:00
nfc	net: nfc: Fix use-after-free in local_cleanup()	2023-01-13 20:53:44 -08:00
nsh
openvswitch	net: openvswitch: fix flow memory leak in ovs_flow_cmd_new	2023-02-02 11:32:51 -08:00
packet	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
phonet
psample
qrtr	net: qrtr: free memory on error path in radix_tree_insert()	2023-01-28 00:21:32 -08:00
rds	rds: remove redundant variable total_payload_len	2022-11-04 10:09:50 +00:00
rfkill	driver core: make struct class.dev_uevent() take a const *	2022-11-24 17:12:15 +01:00
rose	net/rose: Fix to not accept on connected socket	2023-01-28 00:19:57 -08:00
rxrpc	rxrpc: Fix wrong error return in rxrpc_connect_call()	2023-01-12 21:51:55 -08:00
sched	net: sched: sch: Bounds check priority	2023-01-31 10:37:58 +01:00
sctp	sctp: do not check hb_timer.expires when resetting hb_timer	2023-01-31 21:01:28 -08:00
smc	use less confusing names for iov_iter direction initializers	2022-11-25 13:01:55 -05:00
strparser
sunrpc	nfsd-6.2 fixes:	2023-01-10 15:03:06 -06:00
switchdev
tipc	tipc: fix unexpected link reset due to discovery messages	2023-01-06 12:53:10 +00:00
tls	net/tls: tls_is_tx_ready() checked list_entry	2023-01-30 21:06:08 -08:00
unix	unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg()	2022-12-15 11:35:18 +01:00
vmw_vsock	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
wireless	Driver Core changes for 6.2-rc1	2022-12-16 03:54:54 -08:00
x25	net/x25: Fix to not accept on connected socket	2023-01-25 09:51:04 +00:00
xdp	bpf: Expand map key argument of bpf_redirect_map to u64	2022-11-15 09:00:27 -08:00
xfrm	Treewide: Stop corrupting socket's task_frag	2022-12-19 17:28:49 -08:00
compat.c	use less confusing names for iov_iter direction initializers	2022-11-25 13:01:55 -05:00
devres.c
Kconfig
Kconfig.debug	net: make NET_(DEV|NS)_REFCNT_TRACKER depend on NET	2022-09-20 14:23:56 -07:00
Makefile
socket.c	Networking changes for 6.2.	2022-12-13 15:47:48 -08:00
sysctl_net.c