Re: [PATCH bpf v4] bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
From: patchwork-bot+netdevbpf
Date: Fri Jul 24 2026 - 18:12:10 EST
Hello:
This patch was applied to bpf/bpf.git (master)
by Eduard Zingerman <eddyz87@xxxxxxxxx>:
On Fri, 24 Jul 2026 18:38:56 +0800 you wrote:
> tcp_bpf_sendmsg() keeps msg_tx across sk_stream_wait_memory(), which
> drops and reacquires the socket lock. Its error path tries to decide
> whether msg_tx names the local temporary message by comparing it with
> the current value of psock->cork.
>
> This comparison is unsafe when two threads send on the same socket:
>
> [...]
Here is the summary with links:
- [bpf,v4] bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()
https://git.kernel.org/bpf/bpf/c/2d66a033864e
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html