This is a note to let you know that I've just added the patch titled
net: release reference to inet6_dev pointer
to the 5.15-stable tree which can be found at:
http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary
The filename of the patch is:
net-release-reference-to-inet6_dev-pointer.patch
and it can be found in the queue-5.15 subdirectory.
If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.
>From stable-owner@xxxxxxxxxxxxxxx Fri Oct 13 23:21:30 2023
From: Patrick Rohr <prohr@xxxxxxxxxx>
Date: Fri, 13 Oct 2023 14:21:14 -0700
Subject: net: release reference to inet6_dev pointer
To: stable@xxxxxxxxxxxxxxx
Cc: "Greg KH" <gregkh@xxxxxxxxxxxxxxxxxxx>, "Sasha Levin" <sashal@xxxxxxxxxx>, "Maciej Żenczykowski" <maze@xxxxxxxxxx>, "Lorenzo Colitti" <lorenzo@xxxxxxxxxx>, "Patrick Rohr" <prohr@xxxxxxxxxx>, "David Ahern" <dsahern@xxxxxxxxxx>, "Simon Horman" <horms@xxxxxxxxxx>, "Leon Romanovsky" <leonro@xxxxxxxxxx>, "David S . Miller" <davem@xxxxxxxxxxxxx>
Message-ID: <20231013212114.3445624-4-prohr@xxxxxxxxxx>
From: Patrick Rohr <prohr@xxxxxxxxxx>
commit 5cb249686e67dbef3ffe53887fa725eefc5a7144 upstream.
addrconf_prefix_rcv returned early without releasing the inet6_dev
pointer when the PIO lifetime is less than accept_ra_min_lft.
Fixes: 5027d54a9c30 ("net: change accept_ra_min_rtr_lft to affect all RA lifetimes")
Cc: Maciej Żenczykowski <maze@xxxxxxxxxx>
Cc: Lorenzo Colitti <lorenzo@xxxxxxxxxx>
Cc: David Ahern <dsahern@xxxxxxxxxx>
Cc: Simon Horman <horms@xxxxxxxxxx>
Reviewed-by: Simon Horman <horms@xxxxxxxxxx>
Reviewed-by: Maciej Żenczykowski <maze@xxxxxxxxxx>
Signed-off-by: Patrick Rohr <prohr@xxxxxxxxxx>
Reviewed-by: Leon Romanovsky <leonro@xxxxxxxxxx>
Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
---
net/ipv6/addrconf.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
--- a/net/ipv6/addrconf.c
+++ b/net/ipv6/addrconf.c
@@ -2737,7 +2737,7 @@ void addrconf_prefix_rcv(struct net_devi
}
if (valid_lft != 0 && valid_lft < in6_dev->cnf.accept_ra_min_lft)
- return;
+ goto put;
/*
* Two things going on here:
Patches currently in stable-queue which might be from stable-owner@xxxxxxxxxxxxxxx are
queue-5.15/net-release-reference-to-inet6_dev-pointer.patch
queue-5.15/net-add-sysctl-accept_ra_min_rtr_lft.patch
queue-5.15/net-change-accept_ra_min_rtr_lft-to-affect-all-ra-lifetimes.patch
