projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 664088f) | patch
kcm: Fix use-after-free caused by clonned sockets
authorKirill Tkhai <[email protected]>
Fri, 1 Jun 2018 11:30:38 +0000 (14:30 +0300)
committerDavid S. Miller <[email protected]>
Fri, 1 Jun 2018 14:28:07 +0000 (10:28 -0400)
commiteb7f54b90bd8f469834c5e86dcf72ebf9a629811
tree508a9eb07e8d0720ac07f5f36b534de880a15769tree | snapshot
parent664088f8d68178809b848ca450f2797efb34e8e7commit | diff
kcm: Fix use-after-free caused by clonned sockets

(resend for properly queueing in patchwork)

kcm_clone() creates kernel socket, which does not take net counter.
Thus, the net may die before the socket is completely destructed,
i.e. kcm_exit_net() is executed before kcm_done().

Reported-by: [email protected]
Signed-off-by: Kirill Tkhai <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
net/kcm/kcmsock.c diff | blob | history
John Crispins staging tree