]> git.baikalelectronics.ru Git - kernel.git/commit
Merge branch 'catch-all-devices'
authorDavid S. Miller <davem@davemloft.net>
Tue, 13 Apr 2021 21:31:52 +0000 (14:31 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 13 Apr 2021 21:31:52 +0000 (14:31 -0700)
commit9edbc878d37b215c7fa1adf727c575de24863f1f
treeaf104bd38ed916d57ef820e71d9f3e8873539a9b
parent83e10b735278520178d4854df50a33e75f53f564
parentb3814e1bf3afc23f7d101e884a6e78010d424463
Merge branch 'catch-all-devices'

Hristo Venev says:

====================
net: Fix two use-after-free bugs

The two patches fix two use-after-free bugs related to cleaning up
network namespaces, one in sit and one in ip6_tunnel. They are easy to
trigger if the user has the ability to create network namespaces.

The bugs can be used to trigger null pointer dereferences. I am not
sure if they can be exploited further, but I would guess that they
can. I am not sending them to the mailing list without confirmation
that doing so would be OK.
====================

Signed-off-by: David S. Miller <davem@davemloft.net>