tree da5d64a2c2296857bc84e54272de9f70341fa096
parent 85e599357234fac7b3d08923bb59ef67c333dd71
author Eric Dumazet <edumazet@google.com> 1738936715 +0000
committer Shuo Yang <gshuoy@google.com> 1743325647 -0700

neighbour: use RCU protection in __neigh_notify()

[ Upstream commit becbd5850c03ed33b232083dd66c6e38c0c0e569 ]

__neigh_notify() can be called without RTNL or RCU protection.

Use RCU protection to avoid potential UAF.


BUG=b/405561456
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2025-21763 in the Linux kernel.

cos-patch: security-high
Fixes: 426b5303eb43 ("[NETNS]: Modify the neighbour table code so it handles multiple network namespaces")
Change-Id: Ib6702d45c8ca1c044d8e1d5b876887a55f56aeaa
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250207135841.1948589-4-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/97680
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Kevin Berry <kpberry@google.com>