Subject xfrm: fix vti tunnel device use-after-free across async crypto resumption
Author q.h.hack.winter@gmail.com
Date 2026-10-14 13:17:00 +0000 UTC
Version
Cc chopps@labn.net davem@davemloft.net dsahern@kernel.org edumazet@kernel.org herbert@gondor.apana.org.au horms@kernel.org idosch@nvidia.com kuba@kernel.org linux-kernel@vger.kernel.org netdev@vger.kernel.org pabeni@redhat.com q.h.hack.winter@gmail.com steffen.klassert@secunet.com
Patches (3)
Name Content [All]
[PATCH net v7 1/3] xfrm: use skb->dev before dropping the reference held across async [Body]
[PATCH net v7 2/3] xfrm: set the address family before the early invalid-state drop [Body]
[PATCH net v7 3/3] xfrm: hold the tunnel device reference across the input path [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-10-27
Passed
ID (for dev) a69172d5-0d3d-4013-9dec-1ef570248c24
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] passed [Log]
[KASAN] Boot test: Base 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] passed [Log]
[KASAN] Build Patched 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] [patched] passed [Log]
[KASAN] Fuzz 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] 864c07de0c7dcbca58b61625dfa2e461ae63b242 [Config] [patched] passed [Log] [Artifacts]