Debian Patches
Status for openvpn-dco-dkms/0.0+git20241121-1+deb13u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| avoid-UAF-when-releasing-peer.patch | ovpn-dco: avoid UAF when releasing peer ovpn_peer_release() schedules a RCU callback which actually frees the peer object. Since we are not in an RCU read critical section, the callback may get scheduled any time, therefore the peer should not be accessed after having invoked ovpn_peer_release(). Move the call to ovpn_netlink_notify_del_peer() after the invokation of ovpn_peer_release() and avoid a use-after-free. |
Antonio Quartulli <antonio@openvpn.net> | no | 2026-05-14 | ||
| serialize-peer-NAPI-add-delete.patch | ovpn-dco: serialize peer NAPI add/delete ovpn-dco creates one NAPI instance per peer and registers it against the ovpn netdev when the peer is created. The NAPI instance is later removed when the peer is released. On older kernels, netif_napi_add* and netif_napi_del do not serialize updates to the netdev napi_list internally. Peer creation happens from the netlink path, while peer release may happen asynchronously from the event workqueue, therefore concurrent peer add/delete can corrupt the shared netdev NAPI list. Serialize the per-peer NAPI registration and unregistration with a mutex in the ovpn instance. |
Ralf Lici <ralf@mandelbit.com> | no | 2026-05-14 |
All known versions for source package 'openvpn-dco-dkms'
- 0.0+git20260804-1 (sid)
- 0.0+git20260519-1 (forky)
- 0.0+git20241121-1+deb13u1 (trixie-proposed-updates)
- 0.0+git20241121-1 (trixie)
- 0.0+git20231103-1~deb12u1 (bookworm)