Ruijie Li 5a8db80f72 net/smc: avoid early lgr access in smc_clc_wait_msg ...

A CLC decline can be received while the handshake is still in an early
stage, before the connection has been associated with a link group.

The decline handling in smc_clc_wait_msg() updates link-group level sync
state for first-contact declines, but that state only exists after link
group setup has completed. Guard the link-group update accordingly and
keep the per-socket peer diagnosis handling unchanged.

This preserves the existing sync_err handling for established link-group
contexts and avoids touching link-group state before it is available.

Fixes: 0cfdd8f92c ("smc: connection and link group creation")
Cc: stable@kernel.org
Reported-by: Yuan Tan <yuantan098@gmail.com>
Reported-by: Yifan Wu <yifanwucs@gmail.com>
Reported-by: Juefei Pu <tomapufckgml@gmail.com>
Reported-by: Xin Liu <bird@lzu.edu.cn>
Signed-off-by: Ruijie Li <ruijieli51@gmail.com>
Signed-off-by: Ren Wei <n05ec@lzu.edu.cn>
Reviewed-by: Dust Li <dust.li@linux.alibaba.com>
Link: https://patch.msgid.link/08c68a5c817acf198cce63d22517e232e8d60718.1776850759.git.ruijieli51@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-04-23 11:00:57 -07:00

..

af_smc.c

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

2026-03-16 19:31:28 -07:00

Kconfig

net: smc: SMC_HS_CTRL_BPF should depend on BPF_JIT

2025-12-04 11:07:18 -08:00

Makefile

net/smc: bpf: Introduce generic hook for handshake flow

2025-11-10 11:19:41 -08:00

smc_cdc.c

net/smc: adapt cursor update when sndbuf and peer DMB are merged

2024-04-30 13:24:48 +02:00

smc_cdc.h

…

smc_clc.c

net/smc: avoid early lgr access in smc_clc_wait_msg

2026-04-23 11:00:57 -07:00

smc_clc.h

net/smc: check smcd_v2_ext_offset when receiving proposal msg

2024-12-15 12:34:59 +00:00

smc_close.c

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

2026-03-16 19:31:28 -07:00

smc_close.h

…

smc_core.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_core.h

net/smc: handle -ENOMEM from smc_wr_alloc_link_mem gracefully

2025-10-30 13:31:43 +01:00

smc_diag.c

dibs: Local gid for dibs devices

2025-09-23 11:13:22 +02:00

smc_hs_bpf.c

net/smc: bpf: Introduce generic hook for handshake flow

2025-11-10 11:19:41 -08:00

smc_hs_bpf.h

net/smc: bpf: Introduce generic hook for handshake flow

2025-11-10 11:19:41 -08:00

smc_ib.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_ib.h

net/smc: fix smc clc failed issue when netdevice not in init_net

2023-10-13 16:52:02 -07:00

smc_inet.c

net/smc: fix general protection fault in __smc_diag_dump

2025-10-20 17:46:06 -07:00

smc_inet.h

net/smc: Introduce IPPROTO_SMC

2024-06-17 13:14:09 +01:00

smc_ism.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_ism.h

dibs: Move data path to dibs layer

2025-09-23 11:13:22 +02:00

smc_llc.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_llc.h

net/smc: Introduce a specific sysctl for TEST_LINK time

2022-09-22 12:58:21 +02:00

smc_netlink.c

genetlink: start to validate reserved header bytes

2022-08-29 12:47:15 +01:00

smc_netlink.h

…

smc_netns.h

…

smc_pnet.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_pnet.h

net/smc: Use a mutex for locking "struct smc_pnettable"

2022-02-24 09:09:33 -08:00

smc_rx.c

net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer

2026-03-20 18:59:30 -07:00

smc_rx.h

net/smc: fix data error when recvmsg with MSG_PEEK flag

2025-01-13 18:59:00 -08:00

smc_stats.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smc_stats.h

net/smc: introduce statistics for ringbufs usage of net namespace

2024-08-20 11:38:23 +02:00

smc_sysctl.c

net/smc: bpf: Introduce generic hook for handshake flow

2025-11-10 11:19:41 -08:00

smc_sysctl.h

net/smc: make wr buffer count configurable

2025-10-30 13:31:43 +01:00

smc_tracepoint.c

…

smc_tracepoint.h

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

smc_tx.c

net/smc: Decouple sf and attached send_buf in smc_loopback

2025-09-23 11:13:21 +02:00

smc_tx.h

smc: Drop smc_sendpage() in favour of smc_sendmsg() + MSG_SPLICE_PAGES

2023-06-24 15:50:12 -07:00

smc_wr.c

Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses

2026-02-22 08:26:33 -08:00

smc_wr.h

net/smc: make wr buffer count configurable

2025-10-30 13:31:43 +01:00

smc.h

net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock()

2026-03-16 19:31:28 -07:00