Subject net: fixes for requests completing on a socket that no longer listens
Author imv4bel@gmail.com
Date 2026-08-24 03:32:45 +0000 UTC
Version
Cc andrew@lunn.ch davem@davemloft.net dsahern@kernel.org edumazet@google.com horms@kernel.org idosch@nvidia.com ij@kernel.org imv4bel@gmail.com jiayuan.chen@linux.dev kees@kernel.org kerneljasonxing@gmail.com kuba@kernel.org kuniyu@google.com linux-kernel@vger.kernel.org martin.lau@kernel.org martineau@kernel.org matttbe@kernel.org ncardwell@google.com netdev@vger.kernel.org pabeni@redhat.com shakeel.butt@linux.dev stable@vger.kernel.org willemb@google.com
Patches (8)
Name Content [All]
[PATCH net v2 1/8] tcp: fix use-after-free of the listener's ipv6_pinfo after IPV6_ADDRFORM [Body]
[PATCH net v2 2/8] tcp: fix imbalanced icsk_accept_queue count in tcp_check_req() [Body]
[PATCH net v2 3/8] ipv6: fix request socket use-after-free after IPV6_ADDRFORM [Body]
[PATCH net v2 4/8] net: fix out-of-bounds write in sk_clone() racing with IPV6_ADDRFORM [Body]
[PATCH net v2 5/8] tcp: do not inherit out_of_order_queue from parent [Body]
[PATCH net v2 6/8] tcp: fix use-after-free in the lockless listener path [Body]
[PATCH net v2 7/8] net: clear sk_tsq_flags in sk_clone() [Body]
[PATCH net v2 8/8] tcp: do not inherit retransmit state from parent [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-08-24
Passed
ID (for dev) 8f731f27-e764-43b1-abb1-2a415b2c6d50
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] passed [Log]
[KASAN] Boot test: Base 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] passed [Log]
[KASAN] Build Patched 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] [patched] passed [Log]
[KASAN] Fuzz 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] 6776efe4a52f289a3fc18f8adf19b035a7d8e1bb [Config] [patched] passed [Log] [Artifacts]