Re: [PATCH net 1/2] net-shapers: clear hierarchy pointer and defer flush frees with RCU
From: patchwork-bot+netdevbpf
Date: Tue Mar 10 2026 - 22:40:28 EST
Hello:
This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Mon, 09 Mar 2026 17:35:06 +0000 you wrote:
> net_shaper_lookup() and the GET dump path traverse shaper state
> under rcu_read_lock() without taking the shaper lock. During
> teardown, net_shaper_flush() freed both the shapers and the
> hierarchy with kfree(), but netdev->net_shaper_hierarchy still
> pointed at the freed hierarchy.
>
> This lets GET readers race netdevice teardown and walk freed
> xarray state or freed shaper objects.
>
> [...]
Here is the summary with links:
- [net,1/2] net-shapers: clear hierarchy pointer and defer flush frees with RCU
(no matching commit)
- [net,2/2] net-shapers: don't free reply skb after genlmsg_reply()
https://git.kernel.org/netdev/net/c/57885276cc16
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html