From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-11.4 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E5024C4332F for ; Wed, 8 Sep 2021 10:40:17 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id D30CF6113E for ; Wed, 8 Sep 2021 10:40:17 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1346480AbhIHKlX (ORCPT ); Wed, 8 Sep 2021 06:41:23 -0400 Received: from mail.kernel.org ([198.145.29.99]:51510 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S233077AbhIHKlP (ORCPT ); Wed, 8 Sep 2021 06:41:15 -0400 Received: by mail.kernel.org (Postfix) with ESMTPS id 1BDE561163; Wed, 8 Sep 2021 10:40:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1631097608; bh=JpJ+KCAjqsJnD4fAHueRPorRkCtY3n+wxVMuMO4+jbQ=; h=Subject:From:Date:References:In-Reply-To:To:Cc:From; b=RphSLjLguBg1w6ajGcSR2Sweq+bCZDIvv4v5V7snqH5CyRn+RGsElV1A5E0UyDNF/ x/3wDC3dDL1HiANbEVGYvX3oc+M6v3WCttsrWtByTt8RGK1nW9O24Kn3tGC52DDN2n vqPdzwMAAi7jt/tEnA3e5Gn5B1RmBChu3/YXGOptzYYhkVmaRU5pKbmmz1kE2UEO16 Grm+PtfgbXWIHwSGCcI9udbNhcZC+L3W2j8N7NvAdQl6y2+f+t6fcPLXDp31d9fZJe Ya17SA3+WsuQFKAXTGpCp+ixwQL2hTy1SsSF20MUGvMMXtqqRQH1Xw/jmVtVXtG19F QBFfYctLRtH0Q== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [PATCH] dccp: don't duplicate ccid when cloning dccp sock From: patchwork-bot+netdevbpf@kernel.org Message-Id: <163109760806.16056.10288524962758514205.git-patchwork-notify@kernel.org> Date: Wed, 08 Sep 2021 10:40:08 +0000 References: In-Reply-To: To: Lin@ci.codeaurora.org, Zhenpeng Cc: dccp@vger.kernel.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org, davem@davemloft.net, kuba@kernel.org, alexey.kodanev@oracle.com Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hello: This patch was applied to netdev/net.git (refs/heads/master): On Wed, 8 Sep 2021 03:40:59 +0000 you wrote: > Commit 2677d2067731 ("dccp: don't free ccid2_hc_tx_sock ...") fixed > a UAF but reintroduced CVE-2017-6074. > > When the sock is cloned, two dccps_hc_tx_ccid will reference to the > same ccid. So one can free the ccid object twice from two socks after > cloning. > > [...] Here is the summary with links: - dccp: don't duplicate ccid when cloning dccp sock https://git.kernel.org/netdev/net/c/d9ea761fdd19 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html