Messages in this thread | | | Subject | Re: [PATCH net v2] ax25: fix use-after-free bugs caused by ax25_ds_del_timer | From | patchwork-bot+netdevbpf@kernel ... | Date | Wed, 03 Apr 2024 01:10:27 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (main) by Jakub Kicinski <kuba@kernel.org>:
On Fri, 29 Mar 2024 09:50:23 +0800 you wrote: > When the ax25 device is detaching, the ax25_dev_device_down() > calls ax25_ds_del_timer() to cleanup the slave_timer. When > the timer handler is running, the ax25_ds_del_timer() that > calls del_timer() in it will return directly. As a result, > the use-after-free bugs could happen, one of the scenarios > is shown below: > > [...]
Here is the summary with links: - [net,v2] ax25: fix use-after-free bugs caused by ax25_ds_del_timer https://git.kernel.org/netdev/net/c/fd819ad3ecf6
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |