Re: [PATCH v3 RESEND] net: rose: fix UAF bugs caused by timer handler
From: patchwork-bot+netdevbpf
Date: Thu Jun 30 2022 - 05:40:53 EST
Hello:
This patch was applied to netdev/net.git (master)
by Paolo Abeni <pabeni@xxxxxxxxxx>:
On Wed, 29 Jun 2022 08:26:40 +0800 you wrote:
> There are UAF bugs in rose_heartbeat_expiry(), rose_timer_expiry()
> and rose_idletimer_expiry(). The root cause is that del_timer()
> could not stop the timer handler that is running and the refcount
> of sock is not managed properly.
>
> One of the UAF bugs is shown below:
>
> [...]
Here is the summary with links:
- [v3,RESEND] net: rose: fix UAF bugs caused by timer handler
https://git.kernel.org/netdev/net/c/9cc02ede6962
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html