netdev - Re: [PATCH net 0/4] net: mctp: struct sock lifetime fixes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 25 Jan 2023 13:10:18 +0000
From:   patchwork-bot+netdevbpf@...nel.org
To:     Jeremy Kerr <jk@...econstruct.com.au>
Cc:     netdev@...r.kernel.org, matt@...econstruct.com.au,
        pabeni@...hat.com, davem@...emloft.net, edumazet@...gle.com,
        kuba@...nel.org, noamr@...-disclosure.com
Subject: Re: [PATCH net 0/4] net: mctp: struct sock lifetime fixes

Hello:

This series was applied to netdev/net.git (master)
by David S. Miller <davem@...emloft.net>:

On Tue, 24 Jan 2023 10:01:02 +0800 you wrote:
> This series is a set of fixes for the sock lifetime handling in the
> AF_MCTP code, fixing a uaf reported by Noam Rathaus
> <noamr@...-disclosure.com>.
> 
> The Fixes: tags indicate the original patches affected, but some
> tweaking to backport to those commits may be needed; I have a separate
> branch with backports to 5.15 if that helps with stable trees.
> 
> [...]

Here is the summary with links:
  - [net,1/4] net: mctp: add an explicit reference from a mctp_sk_key to sock
    https://git.kernel.org/netdev/net/c/de8a6b15d965
  - [net,2/4] net: mctp: move expiry timer delete to unhash
    https://git.kernel.org/netdev/net/c/5f41ae6fca9d
  - [net,3/4] net: mctp: hold key reference when looking up a general key
    https://git.kernel.org/netdev/net/c/6e54ea37e344
  - [net,4/4] net: mctp: mark socks as dead on unhash, prevent re-add
    https://git.kernel.org/netdev/net/c/b98e1a04e27f

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html