Patch Series

Subject net: Fix UAF of sk_dst_get(sk)->dev.
Author kuniyu@google.com
Date 2025-09-11 03:05:29 +0000 UTC
Version 1
Cc alibuda@linux.alibaba.com davem@davemloft.net dust.li@linux.alibaba.com edumazet@google.com geliang@kernel.org guwen@linux.alibaba.com horms@kernel.org hwippel@linux.ibm.com ilyal@mellanox.com john.fastabend@gmail.com kuba@kernel.org kuni1840@gmail.com kuniyu@google.com martineau@kernel.org matttbe@kernel.org mjambigi@linux.ibm.com ncardwell@google.com netdev@vger.kernel.org pabeni@redhat.com sd@queasysnail.net sidraya@linux.ibm.com syzbot@syzkaller.appspotmail.com tonylu@linux.alibaba.com ubraun@linux.ibm.com ubraun@linux.vnet.ibm.com wenjia@linux.ibm.com

Patches (8)

Name Content
[PATCH v1 net 1/8] net: Add sk_dst_dev_rcu() and sk_dst_dev_get(). [Body]
[PATCH v1 net 2/8] smc: Fix use-after-free in __pnet_find_base_ndev(). [Body]
[PATCH v1 net 3/8] smc: Use sk_dst_dev_rcu() in in smc_clc_prfx_set(). [Body]
[PATCH v1 net 4/8] smc: Use sk_dst_dev_rcu() in smc_clc_prfx_match(). [Body]
[PATCH v1 net 5/8] smc: Use sk_dst_dev_rcu() in smc_vlan_by_tcpsk(). [Body]
[PATCH v1 net 6/8] tcp: Use sk_dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check(). [Body]
[PATCH v1 net 7/8] tls: Use sk_dst_dev_rcu() in get_netdev_for_sock(). [Body]
[PATCH v1 net 8/8] mptcp: Use sk_dst_dev_rcu() in mptcp_active_enable(). [Body]

Session 2025-09-11

ID (for dev) aec135a4-ee9b-44eb-bcd5-c3f61de10c25
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
Build Base b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] passed [Log]
Build Patched b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] [patched] passed [Log]
Boot test: Patched b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] [patched] passed
Boot test: Base b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] passed
Fuzzing b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] b4ada0618eed0fbd1b1630f73deb048c592b06a1 [Config] [patched] passed [Log] [Artifacts]