From: Greg Kroah-Hartman Date: Mon, 27 Oct 2025 11:53:55 +0000 (+0100) Subject: 5.4-stable patches X-Git-Tag: v5.4.301~11 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=be7a85dc3c74bfa8d47998b057e4d3207fe02024;p=thirdparty%2Fkernel%2Fstable-queue.git 5.4-stable patches added patches: net-rtnetlink-fix-module-reference-count-leak-issue-in-rtnetlink_rcv_msg.patch --- diff --git a/queue-5.4/net-rtnetlink-fix-module-reference-count-leak-issue-in-rtnetlink_rcv_msg.patch b/queue-5.4/net-rtnetlink-fix-module-reference-count-leak-issue-in-rtnetlink_rcv_msg.patch new file mode 100644 index 0000000000..e2a0ee35e7 --- /dev/null +++ b/queue-5.4/net-rtnetlink-fix-module-reference-count-leak-issue-in-rtnetlink_rcv_msg.patch @@ -0,0 +1,33 @@ +From 5b22f62724a0a09e00d301abf5b57b0c12be8a16 Mon Sep 17 00:00:00 2001 +From: Zhengchao Shao +Date: Mon, 15 Aug 2022 10:46:29 +0800 +Subject: net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg + +From: Zhengchao Shao + +commit 5b22f62724a0a09e00d301abf5b57b0c12be8a16 upstream. + +When bulk delete command is received in the rtnetlink_rcv_msg function, +if bulk delete is not supported, module_put is not called to release +the reference counting. As a result, module reference count is leaked. + +Fixes: a6cec0bcd342 ("net: rtnetlink: add bulk delete support flag") +Signed-off-by: Zhengchao Shao +Acked-by: Nikolay Aleksandrov +Link: https://lore.kernel.org/r/20220815024629.240367-1-shaozhengchao@huawei.com +Signed-off-by: Jakub Kicinski +Signed-off-by: Greg Kroah-Hartman +--- + net/core/rtnetlink.c | 1 + + 1 file changed, 1 insertion(+) + +--- a/net/core/rtnetlink.c ++++ b/net/core/rtnetlink.c +@@ -5304,6 +5304,7 @@ static int rtnetlink_rcv_msg(struct sk_b + if (kind == RTNL_KIND_DEL && (nlh->nlmsg_flags & NLM_F_BULK) && + !(flags & RTNL_FLAG_BULK_DEL_SUPPORTED)) { + NL_SET_ERR_MSG(extack, "Bulk delete is not supported"); ++ module_put(owner); + goto err_unlock; + } + diff --git a/queue-5.4/series b/queue-5.4/series index 0c291c51ee..9be5036ba4 100644 --- a/queue-5.4/series +++ b/queue-5.4/series @@ -221,3 +221,4 @@ padata-reset-next-cpu-when-reorder-sequence-wraps-around.patch nfsd-minor-cleanup-in-layoutcommit-processing.patch nfsd-fix-last-write-offset-handling-in-layoutcommit.patch media-s5p-mfc-remove-an-unused-uninitialized-variable.patch +net-rtnetlink-fix-module-reference-count-leak-issue-in-rtnetlink_rcv_msg.patch