diff options
| author | David Howells <dhowells@redhat.com> | 2026-06-09 15:09:07 +0100 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-06-12 16:48:54 -0700 |
| commit | 107a4cb0d47e735830f852d83970d5c81f8e1e08 (patch) | |
| tree | 889f58cf60de7849e19bea1e7cb47b688d03d6b7 /include/linux/timerqueue_types.h | |
| parent | 5801cff7d5d7b4e9d877dfb627b23eb63167f02c (diff) | |
rxrpc: Fix UAF in rxgk_issue_challenge()
Fix rxgk_issue_challenge() to free the page containing the challenge
content after invoking the tracepoint as the whdr passed to the tracepoint
points into the page just freed.
Fixes: 9d1d2b59341f ("rxrpc: rxgk: Implement the yfs-rxgk security class (GSSAPI)")
Reported-by: Marc Dionne <marc.dionne@auristor.com>
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Simon Horman <horms@kernel.org>
cc: linux-afs@lists.infradead.org
cc: stable@kernel.org
Link: https://patch.msgid.link/20260609140911.838677-4-dhowells@redhat.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'include/linux/timerqueue_types.h')
0 files changed, 0 insertions, 0 deletions