Re: [PATCH] ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Mon, 26 Oct 2026 20:05:35 +1000 you wrote:
> extts_fifo_show() walks ptp->tsevqs with list_count_nodes() and then
> list_first_entry() without holding ptp->tsevqs_lock, the spinlock that
> "protects tsevqs from concurrent access". Every other accessor of the
> list honours it: ptp_open() (list_add_tail), ptp_release() (list_del
> followed by kfree of the per-fd queue), ptp_clock_release() and
> ptp_clock_event() all take tsevqs_lock. extts_fifo_show() is the only
> one that does not.
> 
> [...]

Here is the summary with links:
  - ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked
    https://git.kernel.org/netdev/net/c/603a0c40d414

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html