diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2026-08-22 13:25:54 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-08-22 13:25:55 -0700 |
| commit | e16d750a906b05fa5cf475749668a96928aa0cbc (patch) | |
| tree | 1d2fd7febed1f1baf047da3368070a3f27afc15e /tools/perf/scripts/python/task-analyzer.py | |
| parent | f05516dd7b865666ea7d67e90d0edb588ae9ad18 (diff) | |
| parent | 8d3c1ab82c11d4fadebf817a825fd221b3e197ea (diff) | |
Merge branch 'net-smc-fix-out-of-bounds-and-use-after-free-in-smc-rv2-llc-processing'
Yehyeong Lee says:
====================
net/smc: fix out-of-bounds and use-after-free in SMC-Rv2 LLC processing
Patch 1 fixes a use-after-free of the LLC queue entry in
smc_llc_srv_add_link(), patch 2 bounds the peer's rkey counts, and patch 3
carries the tail of an oversized v2 message in the queue entry so that both
readers are bounded by what arrived. All three are tagged for stable: a
tree that takes 1 and 2 without 3 still deletes rkeys read from whatever an
earlier message left in the shared receive buffer.
====================
Link: https://patch.msgid.link/20260819023306.644849-1-yhlee@isslab.korea.ac.kr
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/task-analyzer.py')
0 files changed, 0 insertions, 0 deletions