Hello:
This patch was applied to netdev/net.git (main)
by David S. Miller <davem@xxxxxxxxxxxxx>:
On Sat, 8 Apr 2023 11:49:43 -0700 you wrote:
> With Eric's ref tracker, syzbot finally found a repro for
> use-after-free in tcp_write_timer_handler() by kernel TCP
> sockets. [0]
>
> If SMC creates a kernel socket in __smc_create(), the kernel
> socket is supposed to be freed in smc_clcsock_release() by
> calling sock_release() when we close() the parent SMC socket.
>
> [...]
Here is the summary with links:
- [v1,net] smc: Fix use-after-free in tcp_write_timer_handler().
https://git.kernel.org/netdev/net/c/9744d2bf1976
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
