Eric Dumazet 35306eb238 af_unix: fix races in sk_peer_pid and sk_peer_cred accesses ... Jann Horn reported that SO_PEERCRED and SO_PEERGROUPS implementations are racy, as af_unix can concurrently change sk_peer_pid and sk_peer_cred. In order to fix this issue, this patch adds a new spinlock that needs to be used whenever these fields are read or written. Jann also pointed out that l2cap_sock_get_peer_pid_cb() is currently reading sk->sk_peer_pid which makes no sense, as this field is only possibly set by AF_UNIX sockets. We will have to clean this in a separate patch. This could be done by reverting b48596d1dc "Bluetooth: L2CAP: Add get_peer_pid callback" or implementing what was truly expected. Fixes: 109f6e39fa ("af_unix: Allow SO_PEERCRED to work across namespaces.") Signed-off-by: Eric Dumazet <edumazet@google.com> Reported-by: Jann Horn <jannh@google.com> Cc: Eric W. Biederman <ebiederm@xmission.com> Cc: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Cc: Marcel Holtmann <marcel@holtmann.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2021-09-30 14:18:40 +01:00
..
6lowpan	6lowpan: iphc: Fix an off-by-one check of array index	2021-07-22 16:19:03 +02:00
9p	net/9p: increase default msize to 128k	2021-09-05 08:36:44 +09:00
802	net: 802: remove dead leftover after ipx driver removal	2021-08-13 16:30:35 -07:00
8021q	dev_ioctl: split out ndo_eth_ioctl	2021-07-27 20:11:45 +01:00
appletalk	net: socket: rework compat_ifreq_ioctl()	2021-07-23 14:20:25 +01:00
atm	…
ax25	ax25: use skb_expand_head	2021-08-03 11:21:39 +01:00
batman-adv	Kbuild updates for v5.15	2021-09-03 15:33:47 -07:00
bluetooth	TTY / Serial patches for 5.15-rc1	2021-09-01 09:51:16 -07:00
bpf	bpf, test, cgroup: Use sk_{alloc,free} for test cases	2021-09-28 09:29:28 +02:00
bpfilter	bpfilter: Specify the log level for the kmsg message	2021-06-25 13:13:50 +02:00
bridge	net: bridge: mcast: Associate the seqcount with its protecting lock.	2021-09-28 17:30:36 -07:00
caif	net-caif: avoid user-triggerable WARN_ON(1)	2021-09-14 12:51:15 +01:00
can	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
ceph	Networking changes for 5.14.	2021-06-30 15:51:09 -07:00
core	af_unix: fix races in sk_peer_pid and sk_peer_cred accesses	2021-09-30 14:18:40 +01:00
dcb	…
dccp	dccp: don't duplicate ccid when cloning dccp sock	2021-09-08 11:28:35 +01:00
decnet	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
dns_resolver	…
dsa	net: dsa: don't allocate the slave_mii_bus using devres	2021-09-21 13:52:16 +01:00
ethernet	move netdev_boot_setup into Space.c	2021-08-03 13:05:26 +01:00
ethtool	ethtool: extend coalesce setting uAPI with CQE mode	2021-08-24 07:38:29 -07:00
hsr	…
ieee802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-08-13 06:41:22 -07:00
ife	…
ipv4	net: udp: annotate data race around udp_sk(sk)->corkflag	2021-09-28 13:21:16 +01:00
ipv6	net: udp: annotate data race around udp_sk(sk)->corkflag	2021-09-28 13:21:16 +01:00
iucv	net/iucv: Replace deprecated CPU-hotplug functions.	2021-08-09 10:13:32 +01:00
kcm	net: sock: introduce sk_error_report	2021-06-29 11:28:21 -07:00
key	…
l2tp	net/l2tp: Fix reference count leak in l2tp_udp_recv_core	2021-09-09 11:00:20 +01:00
l3mdev	…
lapb	…
llc	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
mac80211	mac80211: check return value of rhashtable_init	2021-09-27 12:00:34 +02:00
mac802154	ieee802154: Remove redundant initialization of variable ret	2021-09-07 14:06:08 +01:00
mctp	mctp: perform route destruction under RCU read lock	2021-09-08 11:29:16 +01:00
mpls	mpls: defer ttl decrement in mpls_forward()	2021-07-23 17:17:56 +01:00
mptcp	net: introduce and use lock_sock_fast_nested()	2021-09-30 13:06:47 +01:00
ncsi	net/ncsi: add get MAC address command to get Intel i210 MAC address	2021-09-01 17:18:56 -07:00
netfilter	netfilter: conntrack: serialize hash resizes and cleanups	2021-09-21 03:46:56 +02:00
netlabel	net: fix NULL pointer reference in cipso_v4_doi_free	2021-08-30 12:23:18 +01:00
netlink	net: netlink: Remove unused function	2021-07-30 18:35:47 +02:00
netrom	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
nfc	net: in_irq() cleanup	2021-08-13 14:09:19 -07:00
nsh	…
openvswitch	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-08-19 18:09:18 -07:00
packet	net/packet: clarify source of pr_*() messages	2021-09-10 10:00:59 +01:00
phonet	net: Remove redundant if statements	2021-08-05 13:27:50 +01:00
psample	…
qrtr	net: qrtr: revert check in qrtr_endpoint_post()	2021-09-02 11:37:02 +01:00
rds	net/rds: dma_map_sg is entitled to merge entries	2021-08-18 15:35:50 -07:00
rfkill	…
rose	…
rxrpc	net: RxRPC: make dependent Kconfig symbols be shown indented	2021-08-18 10:12:11 +01:00
sched	net: sched: flower: protect fl_walk() with rcu	2021-09-30 13:20:31 +01:00
sctp	sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb	2021-09-24 10:36:19 +01:00
smc	net/smc: fix 'workqueue leaked lock' in smc_conn_abort_work	2021-09-21 10:54:16 +01:00
strparser	net: sock: introduce sk_error_report	2021-06-29 11:28:21 -07:00
sunrpc	Critical bug fixes:	2021-09-08 15:55:42 -07:00
switchdev	net: make switchdev_bridge_port_{,unoffload} loosely coupled with the bridge	2021-08-04 12:35:07 +01:00
tipc	tipc: increase timeout in tipc_sk_enqueue()	2021-09-13 12:43:10 +01:00
tls	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-06-29 15:45:27 -07:00
unix	af_unix: fix races in sk_peer_pid and sk_peer_cred accesses	2021-09-30 14:18:40 +01:00
vmw_vsock	af_vsock: rename variables in receive loop	2021-09-06 02:25:16 -04:00
wireless	cfg80211: use wiphy DFS domain if it is self-managed	2021-08-26 11:04:55 +02:00
x25	…
xdp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-06-29 15:45:27 -07:00
xfrm	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/	2021-08-27 11:16:29 +01:00
Kconfig	mctp: Add MCTP base	2021-07-29 15:06:49 +01:00
Makefile	mctp: Add MCTP base	2021-07-29 15:06:49 +01:00
compat.c	…
devres.c	…
socket.c	Core:	2021-08-31 16:43:06 -07:00
sysctl_net.c	…