Re: [PATCH 5.10.y 6.1.y 6.6.y] ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
Sasha Levin <[email protected]> Tue, 4 Aug 2026 21:13:24 -0400
| Newsgroups | org.kernel.vger.stable,org.kernel.vger.linux-kernel,org.kernel.vger.netdev |
|---|---|
| Message-ID | <[email protected]> |
On Tue, Aug 04, 2026 at 07:46:54PM +0800, Pengfei Zhang wrote: > commit 9facb861dc6b9b9ea9793ef5032a9a826f7a4229 upstream. > > inet6_dump_fib() saves its progress in cb->args[1] as a positional > index within the current hash chain. Between batches, a concurrent > fib6_new_table() can insert a new table at the chain head, shifting > all existing entries. > > [Adapted to 5.10/6.1/6.6: return variable is 'res' instead of 'err'; > error path uses 'out_unlock' label instead of 'out'] Queued for 5.10, 6.1 and 6.6, thanks. -- Thanks, Sasha