Re: [PATCH net] sctp: fix race between sctp_wait_for_connect and peeloff
[email protected] Thu, 28 May 2026 23:50:06 +0000
| Newsgroups | org.kernel.vger.linux-sctp,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178001220615.1560944.11263521787130041641.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Wed, 27 May 2026 11:24:11 +0800 you wrote: > sctp_wait_for_connect() drops and re-acquires the socket lock while > waiting for the association to reach ESTABLISHED state. During this > window, another thread can peeloff the association to a new socket via > getsockopt(SCTP_SOCKOPT_PEELOFF), changing asoc->base.sk. After > re-acquiring the old socket lock, sctp_wait_for_connect() returns > success without noticing the migration — the caller then accesses > the association under the wrong lock in sctp_datamsg_from_user(). > > [...] Here is the summary with links: - [net] sctp: fix race between sctp_wait_for_connect and peeloff https://git.kernel.org/netdev/net/c/f14fe6395a8b You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html