From: Jakub Kicinski Date: Fri, 12 Jun 2026 23:48:57 +0000 (-0700) Subject: Merge branch 'rxrpc-miscellaneous-fixes' X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=344873108ca7f342f1a7ffeb81ffca2347fe9535;p=thirdparty%2Flinux.git Merge branch 'rxrpc-miscellaneous-fixes' David Howells says: ==================== rxrpc: Miscellaneous fixes Here are some miscellaneous AF_RXRPC fixes: (1) Make sure rxrpc_verify_data() allocates a buffer, even if the DATA packet being looked at is zero length to avoid potential NULL-pointer exceptions. (2) Don't move an OOB message (e.g. an RxGK CHALLENGE) off the receive queue onto the pending queue in recvmsg() if MSG_PEEK is specified. (3) Fix a potential UAF in rxgk_issue_challenge() in which a tracepoint refers to memory just freed by a different pointer. (4) Fix afs net namespace teardown to cancel the incoming call preallocation charger before we disable listening (which will delete the preallocation queue). (5) Fix rxrpc_kernel_charge_accept() to use the socket mutex to defend against listen(0)/shutdown simultaneously deleting the preallocation queue. ==================== Link: https://patch.msgid.link/20260609140911.838677-1-dhowells@redhat.com Signed-off-by: Jakub Kicinski --- 344873108ca7f342f1a7ffeb81ffca2347fe9535