linux

Files

Kuniyuki Iwashima 13159c7125 tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

commit c65f27b9c3 upstream.

get_netdev_for_sock() is called during setsockopt(),
so not under RCU.

Using sk_dst_get(sk)->dev could trigger UAF.

Let's use __sk_dst_get() and dst_dev_rcu().

Note that the only ->ndo_sk_get_lower_dev() user is
bond_sk_get_lower_dev(), which uses RCU.

Fixes: e8f6979981 ("net/tls: Add generic NIC offload infrastructure")
Signed-off-by: Kuniyuki Iwashima <kuniyu@google.com>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: Sabrina Dubroca <sd@queasysnail.net>
Link: https://patch.msgid.link/20250916214758.650211-6-kuniyu@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
[ Keerthana: Backport to v6.6.y ]
Signed-off-by: Keerthana K <keerthana.kalyanasundaram@broadcom.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-17 16:29:55 +01:00

Kconfig

net/tls: Select SOCK_RX_QUEUE_MAPPING from TLS_DEVICE

2021-02-11 19:08:06 -08:00

Makefile

tls: rx: async: hold onto the input skb

2022-07-18 11:24:11 +01:00

tls_device_fallback.c

tls: expand use of tls_cipher_desc in tls_sw_fallback_init

2023-08-27 17:17:42 -07:00

tls_device.c

tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().