Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu

From	David Ahern <dsa@cumulusnetworks.com>
Newsgroups	linux.kernel
Subject	Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu
Date	2017-05-02 19:30 +0200
Message-ID	<tCJMB-1dV-13@gated-at.bofh.it> (permalink)
References	<tAuoF-2hj-5@gated-at.bofh.it> <tAvNL-3kF-1@gated-at.bofh.it> <tAx3c-46S-7@gated-at.bofh.it> <tCw30-rv-11@gated-at.bofh.it> <tCJjA-P5-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 5/2/17 10:58 AM, Andrey Konovalov wrote:
> Do you have a patch that I could test?

not yet.

> 
> I also reported another issue recently, that might also be related to this one:
> https://groups.google.com/forum/#!topic/syzkaller/Rt0pgY4wfiw

different problem. I can still trigger this one with the reproducer you sent

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu Andrey Konovalov <andreyknvl@google.com> - 2017-04-26 14:40 +0200
  Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu "Paul E. McKenney" <paulmck@linux.vnet.ibm.com> - 2017-04-26 16:10 +0200
    Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu Andrey Konovalov <andreyknvl@google.com> - 2017-04-26 16:50 +0200
      Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu "Paul E. McKenney" <paulmck@linux.vnet.ibm.com> - 2017-04-26 17:30 +0200
    Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu David Ahern <dsa@cumulusnetworks.com> - 2017-05-02 04:50 +0200
      Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu Andrey Konovalov <andreyknvl@google.com> - 2017-05-02 19:00 +0200
        Re: net/ipv6: use-after-free in __call_rcu/in6_dev_finish_destroy_rcu David Ahern <dsa@cumulusnetworks.com> - 2017-05-02 19:30 +0200

csiph-web