Re: [PATCH net v2] ipv6: anycast: insert aca into global hash under idev->lock
From: Jakub Kicinski
Date: Fri May 29 2026 - 16:55:36 EST
On Fri, 29 May 2026 23:22:18 +0800 Jiayuan Chen wrote:
> syzbot reported a splat [1]: a slab-use-after-free in
> ipv6_chk_acast_addr(), which walks the global inet6_acaddr_lst[] hash
> under RCU and dereferences a struct ifacaddr6 that has already been
> freed while still linked in the hash, so a later reader walks into a
> dangling node.
Please do not violate the 24h repost grace period on netdev.
We are tracking the violations now, if you keep doing this
there will be consequences..