Ilya Maximets 824a7c2df5 net: openvswitch: fix nested key length validation in the set() action ...

[ Upstream commit 65d91192aa66f05710cfddf6a14b5a25ee554dba ]

It's not safe to access nla_len(ovs_key) if the data is smaller than
the netlink header.  Check that the attribute is OK first.

Fixes: ccb1352e76 ("net: Add Open vSwitch kernel components.")
Reported-by: syzbot+b07a9da40df1576b8048@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=b07a9da40df1576b8048
Tested-by: syzbot+b07a9da40df1576b8048@syzkaller.appspotmail.com
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
Reviewed-by: Eelco Chaudron <echaudro@redhat.com>
Acked-by: Aaron Conole <aconole@redhat.com>
Link: https://patch.msgid.link/20250412104052.2073688-1-i.maximets@ovn.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-04-25 10:45:42 +02:00

..

actions.c

tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().

2025-04-10 14:37:40 +02:00

conntrack.c

openvswitch: get related ct labels from its master if it is not confirmed

2024-07-05 09:33:46 +02:00

conntrack.h

net/sched: act_api: fix miss set post_ct for ovs after do conntrack in act_ct

2021-03-16 15:22:18 -07:00

datapath.c

openvswitch: use RCU protection in ovs_vport_cmd_fill_info()

2025-02-21 13:57:23 +01:00

datapath.h

net/sched: Enable tc skb ext allocation on chain miss only when needed

2022-02-05 10:12:53 +00:00

dp_notify.c

net: openvswitch: use netif_ovs_is_port() instead of opencode

2019-07-08 15:53:25 -07:00

drop.h

net: openvswitch: add misc error drop reasons

2023-08-14 08:01:06 +01:00

flow_netlink.c

net: openvswitch: fix nested key length validation in the set() action

2025-04-25 10:45:42 +02:00

flow_netlink.h

…

flow_table.c

Merge tag 'mm-nonmm-stable-2023-02-20-15-29' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2023-02-23 17:55:40 -08:00

flow_table.h

net: openvswitch: fix to make sure flow_lookup() is not preempted

2020-10-18 12:29:36 -07:00

flow.c

net: openvswitch: fix overwriting ct original tuple for ICMPv6

2024-06-12 11:11:52 +02:00

flow.h

net: openvswitch: reduce cpu_used_mask memory

2023-02-06 22:36:29 -08:00

Kconfig

net: create nf_conntrack_ovs for ovs and tc use

2023-02-10 16:23:03 -08:00

Makefile

openvswitch: add trace points

2021-06-22 10:47:32 -07:00

meter.c

genetlink: remove userhdr from struct genl_info

2023-08-15 14:54:44 -07:00

meter.h

net: openvswitch: use u64 for meter bucket

2020-04-23 18:26:11 -07:00

openvswitch_trace.c

openvswitch: add trace points

2021-06-22 10:47:32 -07:00

openvswitch_trace.h

openvswitch: add trace points

2021-06-22 10:47:32 -07:00

vport-geneve.c

rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link

2022-10-31 18:10:21 -07:00

vport-gre.c

rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link

2022-10-31 18:10:21 -07:00

vport-internal_dev.c

openvswitch: Change the return type for vport_ops.send function hook to int

2022-09-19 18:28:50 -07:00

vport-internal_dev.h

…

vport-netdev.c

rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link

2022-10-31 18:10:21 -07:00

vport-netdev.h

…

vport-vxlan.c

rtnetlink: Honour NLM_F_ECHO flag in rtnl_delete_link

2022-10-31 18:10:21 -07:00

vport.c

net: openvswitch: fix upcall counter access before allocation

2023-06-07 12:25:05 +01:00

vport.h

net: openvswitch: Add support to count upcall packets

2022-12-09 10:43:46 +00:00