[PATCH net 0/4] rxrpc: Miscellaneous fixes

David Howells
2026-04-20T14:59:14Z

Here are some fixes for rxrpc, as found by Sashiko[1]:

(1) Fix leaks in rxkad_verify_response().

(2) Fix lack of unsharing of RESPONSE packets.

(3) Fix integer overflow in RxGK ticket length check.

(4) Fix handling of rxkad-encrypted packets with crypto-misaligned
lengths.

David

The patches can be found here also:

http://git.kernel.org/cgit/linux/kernel/git/dhowells/linux-fs.git/log/?h=rxrpc-fixes

Link: https://sashiko.dev/#/patchset/20260408121252.2249051-1-dhowells%40redhat.com [1]

David Howells (4):
rxrpc: Fix memory leaks in rxkad_verify_response()
rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
rxgk: Fix potential integer overflow in length check
rxrpc: Fix rxkad crypto unalignment handling

include/linux/key.h | 2 +
include/trace/events/rxrpc.h | 1 +
net/rxrpc/ar-internal.h | 2 +-
net/rxrpc/conn_event.c | 12 ++-
net/rxrpc/io_thread.c | 15 +---
net/rxrpc/rxgk_app.c | 2 +-
net/rxrpc/rxgk_common.h | 1 +
net/rxrpc/rxkad.c | 142 +++++++++++++----------------------
net/rxrpc/skbuff.c | 26 ++++++-
9 files changed, 94 insertions(+), 109 deletions(-)