diff options
| author | Jakub Kicinski <[email protected]> | 2024-09-09 17:14:28 -0700 |
|---|---|---|
| committer | Jakub Kicinski <[email protected]> | 2024-09-09 17:14:29 -0700 |
| commit | 228fa9b1e86d13b4031f18793048643384eb4e51 (patch) | |
| tree | bce056075dd45e981c19074a4577abf591dcf0ab /tools/perf/util/scripting-engines/trace-event-python.c | |
| parent | e4225a8c46ec7109fdf2e2ce6f92e52b25cb2363 (diff) | |
| parent | 5aa57d9f2d5311f19434d95b2a81610aa263e23b (diff) | |
Merge branch 'af_unix-correct-manage_oob-when-oob-follows-a-consumed-oob'
Kuniyuki Iwashima says:
====================
af_unix: Correct manage_oob() when OOB follows a consumed OOB.
Recently syzkaller reported UAF of OOB skb.
The bug was introduced by commit 93c99f21db36 ("af_unix: Don't stop
recv(MSG_DONTWAIT) if consumed OOB skb is at the head.") but uncovered
by another recent commit 8594d9b85c07 ("af_unix: Don't call skb_get()
for OOB skb.").
[0]: https://lore.kernel.org/netdev/[email protected]/
====================
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Jakub Kicinski <[email protected]>
Diffstat (limited to 'tools/perf/util/scripting-engines/trace-event-python.c')
0 files changed, 0 insertions, 0 deletions