Re: [PATCH net v2] mac802154: lock rx_mac_cmd_list and drain it before freeing sdata
Jakub Kicinski <[email protected]> Fri, 24 Jul 2026 14:58:34 -0700
| Newsgroups | org.kernel.vger.linux-wpan,org.kernel.vger.linux-kernel,org.kernel.vger.netdev,org.kernel.vger.stable |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 22 Jul 2026 12:16:08 +0200 Ibrahim Hashimov wrote: > rx_mac_cmd_list has no locking. The RX softirq producer in > ieee802154_subif_frame() list_add_tail()s while the mac_wq worker > list_del()s, and the worker dereferences mac_pkt->sdata with no > liveness check. Both sashikos complain about races: https://sashiko.dev/#/patchset/[email protected] https://netdev-ai.bots.linux.dev/sashiko/#/patchset/[email protected]