Re: [PATCH 5.10.y 6.1.y 6.6.y] ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump

Sasha Levin <[email protected]> Tue, 4 Aug 2026 21:13:24 -0400
Newsgroups org.kernel.vger.stable,org.kernel.vger.linux-kernel,org.kernel.vger.netdev
Message-ID <[email protected]>
On Tue, Aug 04, 2026 at 07:46:54PM +0800, Pengfei Zhang wrote:
> commit 9facb861dc6b9b9ea9793ef5032a9a826f7a4229 upstream.
>
> inet6_dump_fib() saves its progress in cb->args[1] as a positional
> index within the current hash chain.  Between batches, a concurrent
> fib6_new_table() can insert a new table at the chain head, shifting
> all existing entries.
>
> [Adapted to 5.10/6.1/6.6: return variable is 'res' instead of 'err';
>  error path uses 'out_unlock' label instead of 'out']

Queued for 5.10, 6.1 and 6.6, thanks.

-- 
Thanks,
Sasha