Messages in this thread | | | Subject | Re: [PATCH V4] mISDN: fix use-after-free bugs in l1oip timer handlers | From | patchwork-bot+netdevbpf@kernel ... | Date | Fri, 30 Sep 2022 11:40:16 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (master) by David S. Miller <davem@davemloft.net>:
On Wed, 28 Sep 2022 21:39:38 +0800 you wrote: > The l1oip_cleanup() traverses the l1oip_ilist and calls > release_card() to cleanup module and stack. However, > release_card() calls del_timer() to delete the timers > such as keep_tl and timeout_tl. If the timer handler is > running, the del_timer() will not stop it and result in > UAF bugs. One of the processes is shown below: > > [...]
Here is the summary with links: - [V4] mISDN: fix use-after-free bugs in l1oip timer handlers https://git.kernel.org/netdev/net/c/2568a7e0832e
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |