[GIT PULL] Networking for v7.2-rc8
Paolo Abeni <[email protected]>
| Newsgroups | gmane.linux.network,gmane.linux.kernel |
|---|---|
| Message-ID | <[email protected]> |
Hi Linus!
The following changes since commit 315f4bd234b3b8a3ed3a71fd4c53b110cf373720:
Merge tag 'net-7.2-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-08-06 11:39:20 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git net-7.2-rc8
for you to fetch changes up to 9006c116dd111d457bf5d074990210f70a4ad2c8:
l2tp: fix tunnel and session refcount leak on seq_file release (2026-08-13 11:49:31 +0200)
----------------------------------------------------------------
There is a known WiFi/mt76 regression, waiting for a complete fix that
should land soonish.
Including fixes from netfilter.
Previous releases - regressions:
- tcp: fix icsk_ack.ato bitfield overflow
- af_unix: Unlink scc_entry in unix_del_edge().
- ipv4: fix use-after-free in fib_nhc_update_mtu()
- netfilter:
- ipset: fix refcount race between list:set GC and swap
- nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
- sched: act_ct: fix sk_buff leak when the header checks reject a packet
- sctp: clear new_transport when removing a peer
- dibs: correct freeing of dmb_clientid_arr
- ovpn: fix NULL dereference when killing missing key
- eth: veth: fix queue index used to wake the peer txq in veth_poll
- eth: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
- eth: gve: fix zero-length skb frag with header-split
Previous releases - always broken:
- core: fix skb length accounting after generic XDP frag adjustment
- af_packet: don't send zero-byte data in tpacket_snd().
- eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
- eth: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
Signed-off-by: Paolo Abeni <[email protected]>
----------------------------------------------------------------
Alexandra Winter (1):
net/dibs: Correct freeing of dmb_clientid_arr
Alexey Velichayshiy (1):
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
Baul Lee (1):
vxlan: do not arm the ageing timer on a device that is down
Chengfeng Ye (1):
ipv4: fix use-after-free in fib_nhc_update_mtu()
Christoph Paasch (1):
mailmap: add entries for Christoph Paasch
Chuck Lever (2):
net/tls: Fail tls_sw_splice_read() after a failed async decrypt
selftests: tls: cover splice after a failed decrypt
Eric Dumazet (4):
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
macvlan: inherit needed_headroom and needed_tailroom from lowerdev
af_packet: Don't send zero-byte data in tpacket_snd().
l2tp: fix tunnel and session refcount leak on seq_file release
Florian Westphal (3):
netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state
netfilter: ipset: fix list type element drift bug
netfilter: ipset: let destroy callbacks adjust ext mem size
Hyunjung Ko (3):
net/sched: act_gact, act_police: range check the fallback control action
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
selftests: tc-testing: add act_ct test for malformed header handling
Jakub Kicinski (10):
Merge branch 'fix-skb-length-accounting-after-xdp-frag-adjustment'
eth: bnxt: cancel IRQ notifier before freeing affinity mask
eth: bnxt: keep the aRFS rmap updated when TPH is enabled
eth: bnxt: decrease indent in bnxt_request_irq()
eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
Merge branch 'eth-bnxt-fix-irq-notifier-bugs'
net: expect instance lock in netdev_queue_get_dma_dev()
Merge branch 'gve-bug-fixes-for-header-split-and-ptp'
Merge tag 'nf-26-08-10' of git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf
Merge tag 'ovpn-net-20260809' of https://github.com/OpenVPN/ovpn-net-next
Jamal Hadi Salim (2):
net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
net/sched: cls_bpf: reject dev-bound programs bound to a different device
Jiawen Wu (1):
net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
Jiayuan Chen (1):
tcp: fix icsk_ack.ato bitfield overflow
Jonas Köppeler (1):
veth: fix queue index used to wake the peer txq in veth_poll
Jordan Rhee (2):
gve: fix zero-length skb frag with header-split
gve: fix NULL dereference due to missing ptp adjfine
Julian Anastasov (3):
ipvs: add totalconns for dest
ipvs: properly update the overload flag on dest edit
ipvs: revalidate ihl to prevent out-of-bounds access
Jun Yang (1):
tipc: read le->link under the node lock in tipc_node_link_down()
Jérémy Jean (2):
sctp: validate cookie AUTH state before use
netfilter: flowtable: publish GC-visible tuple last
Koichiro Den (1):
NTB: ntb_netdev: Preserve RX queue depth on allocation failure
Kuniyuki Iwashima (1):
af_unix: Unlink scc_entry in unix_del_edge().
Kyle Zeng (1):
ipvs: clear IPv4 options after rebasing tunnel ICMP errors
Oleksij Rempel (1):
net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path
Paolo Abeni (2):
Merge branch 'fix-wrong-transport_header-when-sending-vlan-tagged-frames'
Merge branch 'net-tls-fail-splice-after-a-failed-async-decrypt'
Qing Ming (1):
sctp: clear new_transport when removing a peer
Ralf Lici (4):
ovpn: fix NULL dereference when killing missing key
ovpn: finish crypto callback cleanup before peer release
ovpn: run deferred work on a module-owned workqueue
ovpn: defer key slot crypto freeing to workqueue
Siddharth Vadapalli (1):
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
Sun Jian (2):
net: fix skb length accounting after generic XDP frag adjustment
veth: fix skb length accounting after XDP frag adjustment
Wei Fang (2):
net: packet: fix wrong transport_header when sending VLAN-tagged frame
net: tap: fix wrong transport_header when sending VLAN-tagged frame
Xiang Mei (Microsoft) (1):
netfilter: ipset: fix refcount race between list:set GC and swap
Yizhou Zhao (1):
ipvs: separate destination availability state
Yuxiang Yang (1):
sctp: fix use-after-free of cached ASCONF chunk
Zhang Changzhong (1):
net/sched: cls_u32: skip hash tables in u32_bind_class()
Zhiling Zou (1):
netfilter: bridge: release template ct on non-IP path
Zihan Xi (1):
netfilter: nf_conntrack: defer invalid log until after unlock
.mailmap | 4 +
drivers/dibs/dibs_loopback.c | 1 -
drivers/dibs/dibs_main.c | 14 +--
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 131 +++++++++++++-------
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 3 +
drivers/net/ethernet/google/gve/gve_ptp.c | 6 +
drivers/net/ethernet/google/gve/gve_rx_dqo.c | 5 +
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +
drivers/net/ethernet/wangxun/ngbe/ngbe_main.c | 4 +-
drivers/net/ipvlan/ipvlan_main.c | 4 +
drivers/net/macvlan.c | 4 +
drivers/net/ntb_netdev.c | 15 +--
drivers/net/ovpn/crypto.c | 26 ++--
drivers/net/ovpn/crypto.h | 4 +-
drivers/net/ovpn/crypto_aead.c | 19 ++-
drivers/net/ovpn/crypto_aead.h | 1 -
drivers/net/ovpn/io.c | 10 +-
drivers/net/ovpn/main.c | 19 ++-
drivers/net/ovpn/ovpnpriv.h | 4 +
drivers/net/ovpn/peer.c | 8 +-
drivers/net/ovpn/tcp.c | 9 +-
drivers/net/phy/realtek/realtek_main.c | 2 +-
drivers/net/tap.c | 3 +-
drivers/net/veth.c | 24 ++--
drivers/net/vxlan/vxlan_core.c | 2 +-
include/net/act_api.h | 19 +++
include/net/ip_vs.h | 29 ++++-
include/net/route.h | 2 +
include/net/sctp/auth.h | 3 +
include/uapi/linux/ip_vs.h | 6 -
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/dev.c | 10 +-
net/core/netdev_queues.c | 2 +-
net/ipv4/fib_semantics.c | 34 ++----
net/ipv4/route.c | 29 +++++
net/ipv4/tcp_input.c | 6 +-
net/ipv4/tcp_timer.c | 4 +-
net/l2tp/l2tp_debugfs.c | 4 +
net/l2tp/l2tp_ppp.c | 56 ++++++++-
net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +-
net/netfilter/ipset/ip_set_core.c | 19 ++-
net/netfilter/ipset/ip_set_list_set.c | 10 +-
net/netfilter/ipvs/ip_vs_conn.c | 45 +++----
net/netfilter/ipvs/ip_vs_core.c | 18 ++-
net/netfilter/ipvs/ip_vs_ctl.c | 81 ++++++++++---
net/netfilter/ipvs/ip_vs_dh.c | 4 +-
net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
net/netfilter/ipvs/ip_vs_lblcr.c | 8 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 2 -
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 7 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++++++++++++-------
net/netfilter/nf_flow_table_core.c | 7 +-
net/netfilter/nf_log_syslog.c | 4 +-
net/netfilter/nf_tables_offload.c | 2 +-
net/netfilter/nfnetlink_log.c | 13 +-
net/packet/af_packet.c | 7 +-
net/sched/act_api.c | 10 +-
net/sched/act_ct.c | 29 ++++-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_bpf.c | 18 ++-
net/sched/cls_u32.c | 3 +
net/sctp/associola.c | 7 +-
net/sctp/auth.c | 75 ++++++++++++
net/sctp/sm_make_chunk.c | 3 +
net/sctp/sm_statefuns.c | 6 +-
net/tipc/node.c | 15 ++-
net/tls/tls_sw.c | 5 +
net/unix/garbage.c | 1 +
tools/testing/selftests/net/tls.c | 75 ++++++++++--
.../selftests/tc-testing/tc-tests/actions/ct.json | 40 +++++++
76 files changed, 894 insertions(+), 327 deletions(-)