Re: [PATCH net] net/smc: fix TOCTOU race between smc_listen_out() and listener close
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-s390 |
|---|---|
| Message-ID | <178601640689.798872.1785237402553323723.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Paolo Abeni <[email protected]>: On Mon, 3 Aug 2026 09:07:01 +0200 you wrote: > smc_listen_out() reads lsmc->sk.sk_state without the listener lock, > then acquires lock_sock_nested() only after the check passes. This > opens a window where smc_close_active() can transition the listener > to SMC_CLOSED, call smc_close_cleanup_listen() to drain the accept > queue, and release the lock, all between the lockless read and the > delayed lock acquisition: > > [...] Here is the summary with links: - [net] net/smc: fix TOCTOU race between smc_listen_out() and listener close https://git.kernel.org/netdev/net/c/185a4caeecab You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html