Re: [PATCH for-next] RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
From: Markus Elfring
Date: Thu Mar 06 2025 - 07:56:46 EST
> After the erdma_cep_put(new_cep) being called, new_cep will be freed,
> and the following dereference will cause a UAF problem. Fix this issue.
* Would a change description be nicer without an abbreviation?
* Will any additional tags become helpful?
+ https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst?h=v6.14-rc5#n539
+ See also:
https://lore.kernel.org/cocci/20a1a47c-8906-44e8-92e6-9b3e698b1491@xxxxxx/
https://sympa.inria.fr/sympa/arc/cocci/2025-03/msg00075.html
https://lkml.org/lkml/2025/3/5/1100
Regards,
Markus