Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754993AbbLAP3p (ORCPT ); Tue, 1 Dec 2015 10:29:45 -0500 Received: from mail-pa0-f48.google.com ([209.85.220.48]:33654 "EHLO mail-pa0-f48.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754799AbbLAP3m (ORCPT ); Tue, 1 Dec 2015 10:29:42 -0500 Message-ID: <1448983778.25582.34.camel@edumazet-glaptop2.roam.corp.google.com> Subject: Re: net: Use after free in dst_release on boot From: Eric Dumazet To: Hannes Frederic Sowa Cc: Sasha Levin , davem@davemloft.net, kuznet@ms2.inr.ac.ru, yoshfuji@linux-ipv6.org, kaber@trash.net, netdev@vger.kernel.org, LKML , Eric Dumazet Date: Tue, 01 Dec 2015 07:29:38 -0800 In-Reply-To: <1448982288.3372279.454745393.4F634AAE@webmail.messagingengine.com> References: <5658C188.4050708@oracle.com> <1448982288.3372279.454745393.4F634AAE@webmail.messagingengine.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.10.4-0ubuntu2 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 900 Lines: 29 On Tue, 2015-12-01 at 16:04 +0100, Hannes Frederic Sowa wrote: > Hi, > > On Fri, Nov 27, 2015, at 21:48, Sasha Levin wrote: > > [ 117.057618] BUG: KASAN: use-after-free in dst_release+0x9a/0xc0 at > > addr ffff8806cf7c7560 > > > > [ 117.058566] Read of size 2 by task swapper/0/1 > > > > Can you check if the following commit was already applied? net wasn't > merged into net-next for a while. > > commit d69bbf88c8d0b367cf3e3a052f6daadf630ee566 > Author: Eric Dumazet > Date: Mon Nov 9 17:51:23 2015 -0800 > > net: fix a race in dst_release() Yes, this most definitely is the fix for this problem. Thanks Hannes ! -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/