netdev - Re: [PATCH net-next 1/6] ipvs: Defer ip_vs_ftp unregister during netns cleanup

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <175876142799.2757835.12600541116025822006.git-patchwork-notify@kernel.org>
Date: Thu, 25 Sep 2025 00:50:27 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Florian Westphal <fw@...len.de>
Cc: netdev@...r.kernel.org, pabeni@...hat.com, davem@...emloft.net,
 edumazet@...gle.com, kuba@...nel.org, netfilter-devel@...r.kernel.org,
 pablo@...filter.org
Subject: Re: [PATCH net-next 1/6] ipvs: Defer ip_vs_ftp unregister during
 netns
 cleanup

Hello:

This series was applied to netdev/net-next.git (main)
by Florian Westphal <fw@...len.de>:

On Wed, 24 Sep 2025 16:06:49 +0200 you wrote:
> From: Slavin Liu <slavin452@...il.com>
> 
> On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp
> before connections with valid cp->app pointers are flushed, leading to a
> use-after-free.
> 
> Fix this by introducing a global `exiting_module` flag, set to true in
> ip_vs_ftp_exit() before unregistering the pernet subsystem. In
> __ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns
> cleanup (when exiting_module is false) and defer it to
> __ip_vs_cleanup_batch(), which unregisters all apps after all connections
> are flushed. If called during module exit, unregister ip_vs_ftp
> immediately.
> 
> [...]

Here is the summary with links:
  - [net-next,1/6] ipvs: Defer ip_vs_ftp unregister during netns cleanup
    https://git.kernel.org/netdev/net-next/c/134121bfd99a
  - [net-next,2/6] netfilter: nfnetlink: reset nlh pointer during batch replay
    https://git.kernel.org/netdev/net-next/c/09efbac953f6
  - [net-next,3/6] netfilter: nft_set_pipapo: use 0 genmask for packetpath lookups
    https://git.kernel.org/netdev/net-next/c/4dbac7db17f1
  - [net-next,4/6] netfilter: nft_set_pipapo_avx2: fix skip of expired entries
    https://git.kernel.org/netdev/net-next/c/5823699a11cf
  - [net-next,5/6] selftests: netfilter: nft_concat_range.sh: add check for double-create bug
    https://git.kernel.org/netdev/net-next/c/94bd247bc25b
  - [net-next,6/6] netfilter: nf_conntrack: do not skip entries in /proc/net/nf_conntrack
    https://git.kernel.org/netdev/net-next/c/c5ba345b2d35

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html