]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
Merge branch 'tcp-rds-fix-use-after-free-around-kernel-tcp-reqsk'
authorJakub Kicinski <kuba@kernel.org>
Wed, 13 Mar 2024 01:56:18 +0000 (18:56 -0700)
committerJakub Kicinski <kuba@kernel.org>
Wed, 13 Mar 2024 01:56:18 +0000 (18:56 -0700)
commit67072c314f5f0ec12a7a51a19f7156eebb073654
tree274d6b7b03e480f5a7593fdef1d8d9aff0f2e3ac
parent9187210eee7d87eea37b45ea93454a88681894a4
parent2a750d6a5b365265dbda33330a6188547ddb5c24
Merge branch 'tcp-rds-fix-use-after-free-around-kernel-tcp-reqsk'

Kuniyuki Iwashima says:

====================
tcp/rds: Fix use-after-free around kernel TCP reqsk.

syzkaller reported an warning of netns ref tracker for RDS TCP listener,
which commit 740ea3c4a0b2 ("tcp: Clean up kernel listener's reqsk in
inet_twsk_purge()") fixed for per-netns ehash.

This series fixes the bug in the partial fix and fixes the reported bug
in the global ehash.

v4: https://lore.kernel.org/netdev/20240307232151.55963-1-kuniyu@amazon.com/
v3: https://lore.kernel.org/netdev/20240307224423.53315-1-kuniyu@amazon.com/
v2: https://lore.kernel.org/netdev/20240227011041.97375-1-kuniyu@amazon.com/
v1: https://lore.kernel.org/netdev/20240223172448.94084-1-kuniyu@amazon.com/
====================

Link: https://lore.kernel.org/r/20240308200122.64357-1-kuniyu@amazon.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>