Hello:
This patch was applied to bpf/bpf-next.git (refs/heads/master):
On Wed, 7 Apr 2021 20:05:56 -0700 you wrote:
> From: Cong Wang <cong.wang@xxxxxxxxxxxxx>
>
> The last refcnt of the psock can be gone right after
> sock_map_remove_links(), so sk_psock_stop() could trigger a UAF.
> The reason why I placed sk_psock_stop() there is to avoid RCU read
> critical section, and more importantly, some callee of
> sock_map_remove_links() is supposed to be called with RCU read lock,
> we can not simply get rid of RCU read lock here. Therefore, the only
> choice we have is to grab an additional refcnt with sk_psock_get()
> and put it back after sk_psock_stop().
>
> [...]
Here is the summary with links:
- [bpf-next] sock_map: fix a potential use-after-free in sock_map_close()
https://git.kernel.org/bpf/bpf-next/c/aadb2bb83ff7
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
