Subject: Re: [PATCH net] bpf, sockmap: fix race in sock_map_free()

From: [email-masked]
Date: Mon, 05 Dec 2022 03:00:15 +0000

Hello:

This patch was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <[email-masked]>:

On Fri,  2 Dec 2022 11:16:40 +0000 you wrote:
> sock_map_free() calls release_sock(sk) without owning a reference
> on the socket. This can cause use-after-free as syzbot found [1]
> 
> Jakub Sitnicki already took care of a similar issue
> in sock_hash_free() in commit 75e68e5bf2c7 ("bpf, sockhash:
> Synchronize delete from bucket list on map free")
> 
> [...]

Here is the summary with links:
  - [net] bpf, sockmap: fix race in sock_map_free()
    https://git.kernel.org/bpf/bpf-next/c/0a182f8d6074

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html