Re: [PATCH net 0/1] net: hsr: fix node-table UAF on device teardown

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Wed, 13 May 2026 19:38:37 -0400 you wrote:
> Hi,
> 
> HSR generic-netlink node-list/status readers walk hsr->node_db under
> rcu_read_lock(), but RTM_DELLINK teardown frees the same node table
> immediately via plain list_del() + kfree(). A reader that has already
> obtained a struct hsr_node can race hsr_dellink() and dereference
> freed node memory.
> 
> [...]

Here is the summary with links:
  - [net,1/1] net: hsr: defer node table free until after RCU readers
    https://git.kernel.org/netdev/net/c/aaec7096f996

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html