Re: [PATCH net v2] tcp: fix AO info use-after-free in tcp_ao_connect_init()

[Eric Dumazet]

On Tue, Aug 25, 2026 at 9:21 AM Qing Ming <a0yami@xxxxxxxxxxx> wrote:
>
> tcp_v4_connect() adds a SYN-SENT socket to the ehash before calling
> tcp_connect().  If TCP-AO is configured, tcp_connect() first verifies that
> a key matches the peer and the bound device's current L3 master.
> tcp_ao_connect_init() later resolves the L3 master again and removes keys
> which do not match it.

...

> Fixes: 248411b8cb89 ("net/tcp: Wire up l3index to TCP-AO")
> Cc: stable@xxxxxxxxxxxxxxx
> Assisted-by: Codex:gpt-5
> Signed-off-by: Qing Ming <a0yami@xxxxxxxxxxx>

Reviewed-by: Eric Dumazet <edumazet@xxxxxxxxxx>

Thanks!