]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Merge branch 'vsock-fix-transport_-h2g-g2h-dgram-local-toctou-issues'
authorJakub Kicinski <kuba@kernel.org>
Tue, 8 Jul 2025 15:39:53 +0000 (08:39 -0700)
committerJakub Kicinski <kuba@kernel.org>
Tue, 8 Jul 2025 15:39:53 +0000 (08:39 -0700)
commit40c47232772e45385757e8c979d8871895c78823
treee36fa8c3602a18a307393d45fd7c8b17fea2d8d0
parent95a234f6affbf51f06338383537ab80d637bb785
parent1e7d9df379a04ccd0c2f82f39fbb69d482e864cc
Merge branch 'vsock-fix-transport_-h2g-g2h-dgram-local-toctou-issues'

Michal Luczaj says:

====================
vsock: Fix transport_{h2g,g2h,dgram,local} TOCTOU issues

transport_{h2g,g2h,dgram,local} may become NULL on vsock_core_unregister().
Make sure a poorly timed `rmmod transport` won't lead to a NULL/stale
pointer dereference.

Note that these oopses are pretty unlikely to happen in the wild. Splats
were collected after sprinkling kernel with mdelay()s.

v3: https://lore.kernel.org/20250702-vsock-transports-toctou-v3-0-0a7e2e692987@rbox.co
v2: https://lore.kernel.org/20250620-vsock-transports-toctou-v2-0-02ebd20b1d03@rbox.co
v1: https://lore.kernel.org/20250618-vsock-transports-toctou-v1-0-dd2d2ede9052@rbox.co
====================

Link: https://patch.msgid.link/20250703-vsock-transports-toctou-v4-0-98f0eb530747@rbox.co
Signed-off-by: Jakub Kicinski <kuba@kernel.org>