[PATCH net v3 0/1] atm: mpoa: Fix UAF on qos_head list in procfs
From: Minseong Kim
Date: Thu Dec 04 2025 - 01:24:30 EST
Changes since v2:
- Replace atm_mpoa_search_qos() with atm_mpoa_get_qos() to avoid
returning an unprotected pointer.
- Add atm_mpoa_delete_qos_by_ip() so search+unlink+free is atomic
under qos_mutex, preventing double-free/UAF.
- Update all callers accordingly.
Minseong Kim (1):
atm: mpoa: Fix UAF on qos_head list in procfs
net/atm/mpc.c | 184 ++++++++++++++++++++++++++++++++----------
net/atm/mpc.h | 3 +-
net/atm/mpoa_caches.c | 17 ++--
net/atm/mpoa_proc.c | 2 +-
4 files changed, 149 insertions(+), 57 deletions(-)
--
2.39.5 (Apple Git-154)