From: Jakub Kicinski Date: Thu, 11 Jun 2026 23:01:18 +0000 (-0700) Subject: Merge branch 'tipc-fix-netlink-gate-and-receive-path-bugs' X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9bf10032894f429b3e221de63cf95a8544511a90;p=thirdparty%2Flinux.git Merge branch 'tipc-fix-netlink-gate-and-receive-path-bugs' Michael Bommarito says: ==================== tipc: fix netlink gate and receive-path bugs This is v4 of the public TIPC series. The only change from v3 is in patch 1: TIPC_NL_MEDIA_SET now uses GENL_UNS_ADMIN_PERM like the other mutators, instead of GENL_ADMIN_PERM, so the whole series uses the namespace-aware CAP_NET_ADMIN check that matches the legacy TIPC netlink path. Patches 2 and 3 are unchanged. Patch 1 gives the TIPCv2 mutating generic-netlink operations the admin gate the legacy API already has, so a local unprivileged process can no longer change TIPC state. Patch 2 drops CONN_ACK messages that acknowledge more outstanding sends than exist, preventing the snt_unacked underflow. Patch 3 rejects peer bindings with lower > upper, which would otherwise leak binding-table memory. ==================== Link: https://patch.msgid.link/20260610124003.3831170-1-michael.bommarito@gmail.com Signed-off-by: Jakub Kicinski --- 9bf10032894f429b3e221de63cf95a8544511a90