netdev - Re: [PATCH v1 net] tipc: Fix use-after-free in tipc_conn

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <175194000651.3541197.6022800124724678298.git-patchwork-notify@kernel.org>
Date: Tue, 08 Jul 2025 02:00:06 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Kuniyuki Iwashima <kuniyu@...gle.com>
Cc: jmaloy@...hat.com, davem@...emloft.net, edumazet@...gle.com,
 kuba@...nel.org, pabeni@...hat.com, horms@...nel.org, ying.xue@...driver.com,
 kuni1840@...il.com, netdev@...r.kernel.org,
 tipc-discussion@...ts.sourceforge.net,
 syzbot+d333febcf8f4bc5f6110@...kaller.appspotmail.com
Subject: Re: [PATCH v1 net] tipc: Fix use-after-free in tipc_conn_close().

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@...nel.org>:

On Wed,  2 Jul 2025 01:43:40 +0000 you wrote:
> syzbot reported a null-ptr-deref in tipc_conn_close() during netns
> dismantle. [0]
> 
> tipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr and calls
> tipc_conn_close() for each tipc_conn.
> 
> The problem is that tipc_conn_close() is called after releasing the
> IDR lock.
> 
> [...]

Here is the summary with links:
  - [v1,net] tipc: Fix use-after-free in tipc_conn_close().
    https://git.kernel.org/netdev/net/c/667eeab4999e

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html