This is a note to let you know that I've just added the patch titled
[PATCH stable 5.8 08/25] chelsio/chtls: fix writing freed memory
to the 5.8-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
chelsio-chtls-fix-writing-freed-memory.patch
and it can be found in the queue-5.8 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From foo@baz Sat Oct 24 10:56:27 AM CEST 2020
From: Vinay Kumar Yadav <vinay.yadav@xxxxxxxxxxx>
Date: Mon, 19 Oct 2020 17:20:25 +0530
Subject: [PATCH stable 5.8 08/25] chelsio/chtls: fix writing freed memory
From: Vinay Kumar Yadav <vinay.yadav@xxxxxxxxxxx>
[ Upstream commit da1a039bcf293e4699d413c9f65d975da2d7c0bd ]
When chtls_sock *csk is freed, same memory can be allocated
to different csk in chtls_sock_create().
csk->cdev = NULL; statement might ends up modifying wrong
csk, eventually causing kernel panic.
removing (csk->cdev = NULL) statement as it is not required.
Fixes: 3a0a97838923 ("crypto/chtls: Fix chtls crash in connection cleanup")
Signed-off-by: Vinay Kumar Yadav <vinay.yadav@xxxxxxxxxxx>
Signed-off-by: Jakub Kicinski <kuba@xxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
drivers/crypto/chelsio/chtls/chtls_cm.c | 1 -
1 file changed, 1 deletion(-)
--- a/drivers/crypto/chelsio/chtls/chtls_cm.c
+++ b/drivers/crypto/chelsio/chtls/chtls_cm.c
@@ -483,7 +483,6 @@ void chtls_destroy_sock(struct sock *sk)
chtls_purge_write_queue(sk);
free_tls_keyid(sk);
kref_put(&csk->kref, chtls_sock_release);
- csk->cdev = NULL;
if (sk->sk_family == AF_INET)
sk->sk_prot = &tcp_prot;
#if IS_ENABLED(CONFIG_IPV6)
Patches currently in stable-queue which might be from vinay.yadav@xxxxxxxxxxx are
queue-5.8/chelsio-chtls-fix-panic-when-server-is-on-ipv6.patch
queue-5.8/chelsio-chtls-fix-writing-freed-memory.patch
queue-5.8/chelsio-chtls-fix-socket-lock.patch
queue-5.8/chelsio-chtls-correct-netdevice-for-vlan-interface.patch
queue-5.8/chelsio-chtls-correct-function-return-and-return-type.patch
queue-5.8/chelsio-chtls-fix-panic-when-listen-on-multiadapter.patch
