[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id:
<173353683001.2872036.8357639444032683736.git-patchwork-notify@kernel.org>
Date: Sat, 07 Dec 2024 02:00:30 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Eric Dumazet <edumazet@...gle.com>
Cc: davem@...emloft.net, kuba@...nel.org, pabeni@...hat.com,
netdev@...r.kernel.org, eric.dumazet@...il.com, i.maximets@....org,
dan.streetman@...onical.com, steffen.klassert@...unet.com
Subject: Re: [PATCH v2 net] net: defer final 'struct net' free in netns dismantle
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@...nel.org>:
On Wed, 4 Dec 2024 12:54:55 +0000 you wrote:
> Ilya reported a slab-use-after-free in dst_destroy [1]
>
> Issue is in xfrm6_net_init() and xfrm4_net_init() :
>
> They copy xfrm[46]_dst_ops_template into net->xfrm.xfrm[46]_dst_ops.
>
> But net structure might be freed before all the dst callbacks are
> called. So when dst_destroy() calls later :
>
> [...]
Here is the summary with links:
- [v2,net] net: defer final 'struct net' free in netns dismantle
https://git.kernel.org/netdev/net/c/0f6ede9fbc74
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
Powered by blists - more mailing lists