]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commitdiff
Merge branch 'tipc-fix-two-race-issues-in-tipc_conn_alloc'
authorJakub Kicinski <kuba@kernel.org>
Tue, 22 Nov 2022 04:45:28 +0000 (20:45 -0800)
committerJakub Kicinski <kuba@kernel.org>
Tue, 22 Nov 2022 04:45:29 +0000 (20:45 -0800)
Xin Long says:

====================
tipc: fix two race issues in tipc_conn_alloc

The race exists beteen tipc_topsrv_accept() and tipc_conn_close(),
one is allocating the con while the other is freeing it and there
is no proper lock protecting it. Therefore, a null-pointer-defer
and a use-after-free may be triggered, see details on each patch.
====================

Link: https://lore.kernel.org/r/cover.1668807842.git.lucien.xin@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

Trivial merge