[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id:
<172069322959.11889.7076340448823741973.git-patchwork-notify@kernel.org>
Date: Thu, 11 Jul 2024 10:20:29 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Chengen Du <chengen.du@...onical.com>
Cc: jhs@...atatu.com, xiyou.wangcong@...il.com, jiri@...nulli.us,
davem@...emloft.net, edumazet@...gle.com, kuba@...nel.org, pabeni@...hat.com,
ozsh@...dia.com, paulb@...dia.com, marcelo.leitner@...il.com,
netdev@...r.kernel.org, linux-kernel@...r.kernel.org,
gerald.yang@...onical.com
Subject: Re: [PATCH net v3] net/sched: Fix UAF when resolving a clash
Hello:
This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@...hat.com>:
On Wed, 10 Jul 2024 13:37:47 +0800 you wrote:
> KASAN reports the following UAF:
>
> BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]
> Read of size 1 at addr ffff888c07603600 by task handler130/6469
>
> Call Trace:
> <IRQ>
> dump_stack_lvl+0x48/0x70
> print_address_description.constprop.0+0x33/0x3d0
> print_report+0xc0/0x2b0
> kasan_report+0xd0/0x120
> __asan_load1+0x6c/0x80
> tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct]
> tcf_ct_act+0x886/0x1350 [act_ct]
> tcf_action_exec+0xf8/0x1f0
> fl_classify+0x355/0x360 [cls_flower]
> __tcf_classify+0x1fd/0x330
> tcf_classify+0x21c/0x3c0
> sch_handle_ingress.constprop.0+0x2c5/0x500
> __netif_receive_skb_core.constprop.0+0xb25/0x1510
> __netif_receive_skb_list_core+0x220/0x4c0
> netif_receive_skb_list_internal+0x446/0x620
> napi_complete_done+0x157/0x3d0
> gro_cell_poll+0xcf/0x100
> __napi_poll+0x65/0x310
> net_rx_action+0x30c/0x5c0
> __do_softirq+0x14f/0x491
> __irq_exit_rcu+0x82/0xc0
> irq_exit_rcu+0xe/0x20
> common_interrupt+0xa1/0xb0
> </IRQ>
> <TASK>
> asm_common_interrupt+0x27/0x40
>
> [...]
Here is the summary with links:
- [net,v3] net/sched: Fix UAF when resolving a clash
https://git.kernel.org/netdev/net/c/26488172b029
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
Powered by blists - more mailing lists