Messages in this thread | | | Date | Wed, 30 Jun 2021 08:51:07 +0200 | From | Steffen Klassert <> | Subject | Re: [PATCH] net: xfrm: fix memory leak in xfrm_user_rcv_msg |
| |
On Fri, Jun 25, 2021 at 01:23:54PM +0300, Pavel Skripkin wrote: > Syzbot reported memory leak in xfrm_user_rcv_msg(). The > problem was is non-freed skb's frag_list. > > In skb_release_all() skb_release_data() will be called only > in case of skb->head != NULL, but netlink_skb_destructor() > sets head to NULL. So, allocated frag_list skb should be > freed manualy, since consume_skb() won't take care of it > > Fixes: 5106f4a8acff ("xfrm/compat: Add 32=>64-bit messages translator") > Reported-and-tested-by: syzbot+fb347cf82c73a90efcca@syzkaller.appspotmail.com > Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Applied, thanks a lot!
| |