diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2026-08-06 09:01:56 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-08-06 09:01:56 -0700 |
| commit | 1f042e426be08a1da57fa7841fd13eb6764f8f60 (patch) | |
| tree | e3639de241ba3687653e6a725aa670d9b8e6909b /tools/perf/scripts/python | |
| parent | e48e8edbef2eb824201495daa5234560f632b23c (diff) | |
| parent | 3834e079d67feda5fd57d1ea8d4185d316997335 (diff) | |
Merge branch 'tls-fix-plaintext-sk_msg-ring-over-fill'
chanyoung says:
====================
tls: fix plaintext sk_msg ring over-fill
An unprivileged user can oops the kernel by splicing into a kTLS socket
whose open record already has a full plaintext sk_msg ring. Reproduced on
net (53658c6f3682) with a stock config, no KASAN.
Patch 2 oopses an unpatched kernel and passes with patch 1 applied.
====================
Link: https://patch.msgid.link/20260804052837.49015-1-ppoo1220@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions