tree 9f0049b788bbb7a76034d1e4189649c5aa952768
parent 2271f3f4f2083ca2873ea2584a6bcc121fe4786c
author Eric Dumazet <edumazet@google.com> 1738936715 +0000
committer Shuo Yang <gshuoy@google.com> 1743325591 -0700

neighbour: use RCU protection in __neigh_notify()

[ Upstream commit becbd5850c03ed33b232083dd66c6e38c0c0e569 ]

__neigh_notify() can be called without RTNL or RCU protection.

Use RCU protection to avoid potential UAF.

BUG=b/405560945
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2025-21763 in the Linux kernel.

cos-patch: security-high
Fixes: 426b5303eb43 ("[NETNS]: Modify the neighbour table code so it handles multiple network namespaces")
Change-Id: I8fee291e3781d5b619f01d2d8def4b4636872907
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250207135841.1948589-4-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/97640
Reviewed-by: Kevin Berry <kpberry@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>