Kirill Tkhai eb7f54b90b kcm: Fix use-after-free caused by clonned sockets ...

(resend for properly queueing in patchwork)

kcm_clone() creates kernel socket, which does not take net counter.
Thus, the net may die before the socket is completely destructed,
i.e. kcm_exit_net() is executed before kcm_done().

Reported-by: syzbot+5f1a04e374a635efc426@syzkaller.appspotmail.com
Signed-off-by: Kirill Tkhai <ktkhai@virtuozzo.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2018-06-01 10:28:07 -04:00

..

kcmproc.c

net: Drop pernet_operations::async

2018-03-27 13:18:09 -04:00

kcmsock.c

kcm: Fix use-after-free caused by clonned sockets

2018-06-01 10:28:07 -04:00

Kconfig

kcm: Use stream parser

2016-08-17 19:36:23 -04:00

Makefile

kcm: Add statistics and proc interfaces

2016-03-09 16:36:14 -05:00