Re: [PATCH net v3] ipv4: fix use-after-free in fib_nhc_update_mtu()
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178644060690.437668.7502162978674316301.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Paolo Abeni <[email protected]>: On Sat, 8 Aug 2026 02:17:10 +0800 you wrote: > fib_nhc_update_mtu() walks the nexthop exception table under RTNL, but > RTNL does not serialize this walk with PMTU exception updates. The walk > uses rcu_dereference_protected() with a constant true condition without > holding fnhe_lock. > > The following interleaving can therefore occur: > > [...] Here is the summary with links: - [net,v3] ipv4: fix use-after-free in fib_nhc_update_mtu() https://git.kernel.org/netdev/net/c/bc5bde9ce3cc You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html