net: add rcu safety to rtnl_prop_list_size()
authorEric Dumazet <edumazet@google.com>
Fri, 9 Feb 2024 18:12:48 +0000 (18:12 +0000)
committerJakub Kicinski <kuba@kernel.org>
Tue, 13 Feb 2024 01:38:52 +0000 (17:38 -0800)
commit9f30831390ede02d9fcd54fd9ea5a585ab649f4a
tree70b567aaec747d3817da0e850aacc8967d2e9ae8
parent3e36031cc0540ca97b615cbb940331892cbd3d21
net: add rcu safety to rtnl_prop_list_size()

rtnl_prop_list_size() can be called while alternative names
are added or removed concurrently.

if_nlmsg_size() / rtnl_calcit() can indeed be called
without RTNL held.

Use explicit RCU protection to avoid UAF.

Fixes: 88f4fb0c7496 ("net: rtnetlink: put alternative names to getlink message")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Jiri Pirko <jiri@nvidia.com>
Link: https://lore.kernel.org/r/20240209181248.96637-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/core/dev.c
net/core/rtnetlink.c