netdev - Re: [PATCH net] net/sched: sch_qfq: do not free existing class in qfq_change

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <176836201401.2575016.13444177808892506620.git-patchwork-notify@kernel.org>
Date: Wed, 14 Jan 2026 03:40:14 +0000
From: patchwork-bot+netdevbpf@...nel.org
To: Eric Dumazet <edumazet@...gle.com>
Cc: davem@...emloft.net, kuba@...nel.org, pabeni@...hat.com, horms@...nel.org,
 jhs@...atatu.com, xiyou.wangcong@...il.com, jiri@...nulli.us,
 netdev@...r.kernel.org, eric.dumazet@...il.com,
 syzbot+07f3f38f723c335f106d@...kaller.appspotmail.com
Subject: Re: [PATCH net] net/sched: sch_qfq: do not free existing class in
 qfq_change_class()

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@...nel.org>:

On Mon, 12 Jan 2026 17:56:56 +0000 you wrote:
> Fixes qfq_change_class() error case.
> 
> cl->qdisc and cl should only be freed if a new class and qdisc
> were allocated, or we risk various UAF.
> 
> Fixes: 462dbc9101ac ("pkt_sched: QFQ Plus: fair-queueing service at DRR cost")
> Reported-by: syzbot+07f3f38f723c335f106d@...kaller.appspotmail.com
> Closes: https://lore.kernel.org/netdev/6965351d.050a0220.eaf7.00c5.GAE@google.com/T/#u
> Signed-off-by: Eric Dumazet <edumazet@...gle.com>
> 
> [...]

Here is the summary with links:
  - [net] net/sched: sch_qfq: do not free existing class in qfq_change_class()
    https://git.kernel.org/netdev/net/c/3879cffd9d07

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html