linux-kernel - Re: [PATCH for-next] RDMA/erdma: Prevent use-after-free in erdma_accept

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <ad735fa0-2352-4905-b8a6-a1404db08b9e@web.de>
Date: Thu, 6 Mar 2025 13:56:05 +0100
From: Markus Elfring <Markus.Elfring@....de>
To: Cheng Xu <chengyou@...ux.alibaba.com>, linux-rdma@...r.kernel.org,
 Jason Gunthorpe <jgg@...pe.ca>, Leon Romanovsky <leon@...nel.org>
Cc: LKML <linux-kernel@...r.kernel.org>, kernel-janitors@...r.kernel.org,
 Kai Shen <KaiShen@...ux.alibaba.com>
Subject: Re: [PATCH for-next] RDMA/erdma: Prevent use-after-free in
 erdma_accept_newconn()

> After the erdma_cep_put(new_cep) being called, new_cep will be freed,
> and the following dereference will cause a UAF problem. Fix this issue.

* Would a change description be nicer without an abbreviation?

* Will any additional tags become helpful?

  + https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst?h=v6.14-rc5#n539

  + See also:
    https://lore.kernel.org/cocci/20a1a47c-8906-44e8-92e6-9b3e698b1491@web.de/
    https://sympa.inria.fr/sympa/arc/cocci/2025-03/msg00075.html
    https://lkml.org/lkml/2025/3/5/1100


Regards,
Markus