tree 894f4e72248d1679b71fc22281efb6eaf81c54b6
parent fd03a7f3bdf70f126ae38c7d02184b0eb0cacd3a
author Kuniyuki Iwashima <kuniyu@amazon.com> 1668657360 +0100
committer Oleksandr Tymoshenko <ovt@google.com> 1708144992 +0000

ipv6: Fix data races around sk->sk_prot.

Commit 086d49058cd8 ("ipv6: annotate some data-races around sk->sk_prot")
fixed some data-races around sk->sk_prot but it was not enough.

Some functions in inet6_(stream|dgram)_ops still access sk->sk_prot
without lock_sock() or rtnl_lock(), so they need READ_ONCE() to avoid
load tearing.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

BUG=b/324729594
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2022-3567 in the Linux kernel.

CVE-2022-3567
(cherry picked from commit 364f997b5cfe1db0d63a390fe7c801fa2b3115f6)
cos-patch: security-medium
Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Acked-by: Luke Nowakowski-Krijger <luke.nowakowskikrijger@canonical.com>
Acked-by: Cengiz Can <cengiz.can@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Change-Id: I39db0bf23c1fff8f78aa71290346f4cbae43b974
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/64999
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Arnav Kansal <rnv@google.com>