Hello:
This series was applied to bpf/bpf.git (master)
by Martin KaFai Lau <martin.lau@xxxxxxxxxx>:
On Mon, 8 Jul 2024 15:31:29 +0200 you wrote:
> Pedro Pinto and later independently also Hyunwoo Kim and Wongi Lee reported
> an issue that the tcx_entry can be released too early leading to a use
> after free (UAF) when an active old-style ingress or clsact qdisc with a
> shared tc block is later replaced by another ingress or clsact instance.
>
> Essentially, the sequence to trigger the UAF (one example) can be as follows:
>
> [...]
Here is the summary with links:
- [bpf,1/2] bpf: Fix too early release of tcx_entry
https://git.kernel.org/bpf/bpf/c/1cb6f0bae504
- [bpf,2/2] selftests/bpf: Extend tcx tests to cover late tcx_entry release
https://git.kernel.org/bpf/bpf/c/5f1d18de7918
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
