Messages in this thread | | | Subject | Re: [PATCH v3 RESEND] net: rose: fix UAF bugs caused by timer handler | From | patchwork-bot+netdevbpf@kernel ... | Date | Thu, 30 Jun 2022 09:40:12 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (master) by Paolo Abeni <pabeni@redhat.com>:
On Wed, 29 Jun 2022 08:26:40 +0800 you wrote: > There are UAF bugs in rose_heartbeat_expiry(), rose_timer_expiry() > and rose_idletimer_expiry(). The root cause is that del_timer() > could not stop the timer handler that is running and the refcount > of sock is not managed properly. > > One of the UAF bugs is shown below: > > [...]
Here is the summary with links: - [v3,RESEND] net: rose: fix UAF bugs caused by timer handler https://git.kernel.org/netdev/net/c/9cc02ede6962
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |