netdev - [BUG] [ROSE] slab-use-after-free in lock_timer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <938ad48d-a4a3-4729-a46d-4473e190f1a1@free.fr>
Date: Wed, 3 Sep 2025 11:51:49 +0200
From: Bernard Pidoux <bernard.pidoux@...e.fr>
To: linux-hams@...r.kernel.org, netdev <netdev@...r.kernel.org>
Cc: Eric Dumazet <edumazet@...gle.com>
Subject: [BUG] [ROSE] slab-use-after-free in lock_timer_base

On 6.16.4 kernel patched with last ROSE commit for refcount use 
rose_remove_node() is causing refcount_t: underflow; use-after-free

List:       linux-stable-commits
Subject:    Patch "net: rose: split remove and free operations in 
rose_remove_neigh()" has been added to the 6.1
From:       Sasha Levin <sashal () kernel ! org>
Date:       2025-08-30 20:20:24
Message-ID: 20250830202024.2485006-1-sashal () kernel ! org

Bernard Pidoux
F6BVP / AI7BG
View attachment "slab-use-after-free" of type "text/plain" (23665 bytes)