Re: [PATCH net] net/tcp-ao: fix use-after-free of current_key on reconnect to another peer
| Newsgroups | org.kernel.vger.netdev |
|---|---|
| Message-ID | <178725423063.446762.3835321188674867387.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Mon, 17 Aug 2026 06:28:42 +0900 you wrote: > tcp_inbound_ao_hash() is called before bh_lock_sock_nested() is taken, > with only rcu_read_lock() held. On the fast path for established > sockets, if the rnext_keyid sent by the peer differs from > current_key->sndid, the key the peer asked for is looked up and stored > in current_key. The lookup is inside the RCU read side, but current_key > outlives it. > > [...] Here is the summary with links: - [net] net/tcp-ao: fix use-after-free of current_key on reconnect to another peer https://git.kernel.org/netdev/net/c/da4471557f27 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html