Re: [PATCH net v2] tcp: fix AO info use-after-free in tcp_ao_connect_init()
Eric Dumazet <[email protected]>
| Newsgroups | org.kernel.vger.stable,org.kernel.vger.linux-kernel,org.kernel.vger.netdev |
|---|---|
| Message-ID | <CANn89iJMhLgnMjhRp6RKBZxhAQrtWqJB9s7wNcshjJ3derCOdQ@mail.gmail.com> |
On Tue, Aug 25, 2026 at 9:21 AM Qing Ming <[email protected]> wrote: > > tcp_v4_connect() adds a SYN-SENT socket to the ehash before calling > tcp_connect(). If TCP-AO is configured, tcp_connect() first verifies that > a key matches the peer and the bound device's current L3 master. > tcp_ao_connect_init() later resolves the L3 master again and removes keys > which do not match it. ... > Fixes: 248411b8cb89 ("net/tcp: Wire up l3index to TCP-AO") > Cc: [email protected] > Assisted-by: Codex:gpt-5 > Signed-off-by: Qing Ming <[email protected]> Reviewed-by: Eric Dumazet <[email protected]> Thanks!