Re: [PATCH 5.10.y 6.1.y 6.6.y] ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump

From: Sasha Levin

Date: Tue Aug 04 2026 - 21:14:13 EST


On Tue, Aug 04, 2026 at 07:46:54PM +0800, Pengfei Zhang wrote:
> commit 9facb861dc6b9b9ea9793ef5032a9a826f7a4229 upstream.
>
> inet6_dump_fib() saves its progress in cb->args[1] as a positional
> index within the current hash chain. Between batches, a concurrent
> fib6_new_table() can insert a new table at the chain head, shifting
> all existing entries.
>
> [Adapted to 5.10/6.1/6.6: return variable is 'res' instead of 'err';
> error path uses 'out_unlock' label instead of 'out']

Queued for 5.10, 6.1 and 6.6, thanks.

--
Thanks,
Sasha