Skip to content

bpf: Fix a potential use-after-free#6884

Closed
kernel-patches-daemon-bpf-rc[bot] wants to merge 1 commit intobpf-next_basefrom
series/1051977=>bpf-next
Closed

bpf: Fix a potential use-after-free#6884
kernel-patches-daemon-bpf-rc[bot] wants to merge 1 commit intobpf-next_basefrom
series/1051977=>bpf-next

Conversation

@kernel-patches-daemon-bpf-rc
Copy link

Pull request for series with
subject: bpf: Fix a potential use-after-free
version: 1
url: https://patchwork.kernel.org/project/netdevbpf/list/?series=1051977

Refcounting in the check_pseudo_btf_id() function is incorrect:
the __check_pseudo_btf_id() function might get called with a zero
refcounted btf. Fix this, and patch related code accordingly.

Reported-by: syzbot+5a0f1995634f7c1dadbf@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=5a0f1995634f7c1dadbf
Fixes: 76145f7 ("bpf: Refactor check_pseudo_btf_id")
Signed-off-by: Anton Protopopov <a.s.protopopov@gmail.com>
@kernel-patches-daemon-bpf-rc
Copy link
Author

Upstream branch: db975de
series: https://patchwork.kernel.org/project/netdevbpf/list/?series=1051977
version: 1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant