Patch Series

Subject net: Fix UAF of sk_dst_get(sk)->dev.
Author kuniyu@google.com
Date 2025-09-16 21:47:19 +0000 UTC
Version 2
Cc alibuda@linux.alibaba.com davem@davemloft.net dust.li@linux.alibaba.com edumazet@google.com geliang@kernel.org guwen@linux.alibaba.com horms@kernel.org hwippel@linux.ibm.com ilyal@mellanox.com john.fastabend@gmail.com kuba@kernel.org kuni1840@gmail.com kuniyu@google.com martineau@kernel.org matttbe@kernel.org mjambigi@linux.ibm.com netdev@vger.kernel.org pabeni@redhat.com sd@queasysnail.net sidraya@linux.ibm.com syzbot@syzkaller.appspotmail.com tonylu@linux.alibaba.com ubraun@linux.ibm.com ubraun@linux.vnet.ibm.com wenjia@linux.ibm.com

Patches (7)

Name Content
[PATCH v2 net-next 1/7] smc: Fix use-after-free in __pnet_find_base_ndev(). [Body]
[PATCH v2 net-next 2/7] smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). [Body]
[PATCH v2 net-next 3/7] smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). [Body]
[PATCH v2 net-next 4/7] smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk(). [Body]
[PATCH v2 net-next 5/7] tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). [Body]
[PATCH v2 net-next 6/7] mptcp: Call dst_release() in mptcp_active_enable(). [Body]
[PATCH v2 net-next 7/7] mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). [Body]

Session 2025-09-16

ID (for dev) 65cfc341-9843-459b-8bf9-ad573fe0d1f9
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
Build Base a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] passed [Log]
Build Patched a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] [patched] passed [Log]
Boot test: Patched a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] [patched] passed
Boot test: Base a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] passed
Fuzzing a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] a4ab91f470c5c84ce0c17197c1562d29aa032340 [Config] [patched] passed [Log] [Artifacts]