netdev - Re: [Patch net v2 0/3] net_sched: Fix UAF vulnerability in HFSC qdisc

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAM0EoMkXW2rSTG1yr4Ni-y-Kc0BMXoEvYFf300NpM10XT6G7Eg@mail.gmail.com>
Date: Fri, 18 Apr 2025 07:09:40 -0400
From: Jamal Hadi Salim <jhs@...atatu.com>
To: Cong Wang <xiyou.wangcong@...il.com>
Cc: netdev@...r.kernel.org, jiri@...nulli.us, gerrard.tai@...rlabs.sg
Subject: Re: [Patch net v2 0/3] net_sched: Fix UAF vulnerability in HFSC qdisc

On Thu, Apr 17, 2025 at 2:47 PM Cong Wang <xiyou.wangcong@...il.com> wrote:
>
> This patchset contains two bug fixes and a selftest for the first one
> which we have a reliable reproducer, please check each patch
> description for details.
>

For the patchset:
Reviewed-by: Jamal Hadi Salim <jhs@...atatu.com>

cheers,
jamal
> ---
> v2: Add a fix for hfsc_dequeue
>
> Cong Wang (3):
>   net_sched: hfsc: Fix a UAF vulnerability in class handling
>   net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
>   selftests/tc-testing: Add test for HFSC queue emptying during peek
>     operation
>
>  net/sched/sch_hfsc.c                          | 23 ++++++++---
>  .../tc-testing/tc-tests/infra/qdiscs.json     | 39 +++++++++++++++++++
>  2 files changed, 56 insertions(+), 6 deletions(-)
>
> --
> 2.34.1
>