]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
inet: ping: check sock_net() in ping_get_port() and ping_lookup()
authorEric Dumazet <edumazet@google.com>
Fri, 29 Aug 2025 15:30:51 +0000 (15:30 +0000)
committerJakub Kicinski <kuba@kernel.org>
Mon, 1 Sep 2025 20:15:14 +0000 (13:15 -0700)
commit59f26d86b2a16f1406f3b42025062b6d1fba5dd5
treea0a03409153d33787ab2ebdd59912ab1fe75b938
parentec0b1eeece28193e005a6b4b82972565fb5ca2b3
inet: ping: check sock_net() in ping_get_port() and ping_lookup()

We need to check socket netns before considering them in ping_get_port().
Otherwise, one malicious netns could 'consume' all ports.

Add corresponding check in ping_lookup().

Fixes: c319b4d76b9e ("net: ipv4: add IPPROTO_ICMP socket kind")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Yue Haibing <yuehaibing@huawei.com>
Link: https://patch.msgid.link/20250829153054.474201-2-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
net/ipv4/ping.c