Re: [PATCH net v3] ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()
| Newsgroups | org.kernel.vger.netdev,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <178725422913.446762.11873517686880170201.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Mon, 17 Aug 2026 15:26:44 +0200 you wrote: > ipv6_rpl_srh_rcv() dereferences idev from __in6_dev_get() without a NULL > check when reading idev->cnf.rpl_seg_enabled. > > When the device's MTU drops below IPV6_MIN_MTU, addrconf_ifdown() clears > dev->ip6_ptr through RCU_INIT_POINTER(). A packet that passed the idev > check in ip6_rcv_core() can then reach ipv6_rpl_srh_rcv() with > dev->ip6_ptr already NULL. > > [...] Here is the summary with links: - [net,v3] ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() https://git.kernel.org/netdev/net/c/f826df95332c You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html