diff options
| author | Eric Dumazet <edumazet@google.com> | 2026-05-02 15:41:02 +0300 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-05-05 05:24:27 +0300 |
| commit | ac0841d7d202073415c808bda7848502163b87dd (patch) | |
| tree | 0abcafa9d26884a1cf093206594796af69b370ef /scripts | |
| parent | 9d7ebff0c3d90ff7abdb7a77c5906b3c870f70cf (diff) | |
| download | linux-ac0841d7d202073415c808bda7848502163b87dd.tar.xz | |
net: prevent possible UAF in rtnl_prop_list_size()
I was mistaken by synchronize_rcu() [1] call in netdev_name_node_alt_destroy(),
giving a false sense of RCU safety at delete times.
We have to use list_del_rcu() to not confuse potential readers
in rtnl_prop_list_size().
[1] This synchronize_rcu() call was later removed in commit 723de3ebef03
("net: free altname using an RCU callback").
Fixes: 9f30831390ed ("net: add rcu safety to rtnl_prop_list_size()")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260502124102.499204-1-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions