diff options
| author | Eric Dumazet <edumazet@google.com> | 2025-02-07 16:58:38 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2025-02-11 05:09:09 +0300 |
| commit | 6d0ce46a93135d96b7fa075a94a88fe0da8e8773 (patch) | |
| tree | 298aa41bd71b9b154efadea6eceb9391a36a494c /lib/mpi/mpi-inline.c | |
| parent | 90b2f49a502fa71090d9f4fe29a2f51fe5dff76d (diff) | |
| download | linux-6d0ce46a93135d96b7fa075a94a88fe0da8e8773.tar.xz | |
vrf: use RCU protection in l3mdev_l3_out()
l3mdev_l3_out() can be called without RCU being held:
raw_sendmsg()
ip_push_pending_frames()
ip_send_skb()
ip_local_out()
__ip_local_out()
l3mdev_ip_out()
Add rcu_read_lock() / rcu_read_unlock() pair to avoid
a potential UAF.
Fixes: a8e3e1a9f020 ("net: l3mdev: Add hook to output path")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Reviewed-by: David Ahern <dsahern@kernel.org>
Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com>
Link: https://patch.msgid.link/20250207135841.1948589-7-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'lib/mpi/mpi-inline.c')
0 files changed, 0 insertions, 0 deletions