diff options
| author | Paolo Abeni <pabeni@redhat.com> | 2023-01-24 10:01:05 +0800 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2023-01-25 13:07:37 +0000 |
| commit | 6e54ea37e344f145665c2dc3cc534b92529e8de5 (patch) | |
| tree | 182e9dc75015c995d9cf8ea89c6a75ae959a3eab /net/dsa/tag_sja1105.c | |
| parent | 5f41ae6fca9d40ab3cb9b0507931ef7a9b3ea50b (diff) | |
| download | linux-stable-6e54ea37e344f145665c2dc3cc534b92529e8de5.tar.gz linux-stable-6e54ea37e344f145665c2dc3cc534b92529e8de5.tar.bz2 linux-stable-6e54ea37e344f145665c2dc3cc534b92529e8de5.zip | |
net: mctp: hold key reference when looking up a general key
Currently, we have a race where we look up a sock through a "general"
(ie, not directly associated with the (src,dest,tag) tuple) key, then
drop the key reference while still holding the key's sock.
This change expands the key reference until we've finished using the
sock, and hence the sock reference too.
Commit message changes from Jeremy Kerr <jk@codeconstruct.com.au>.
Reported-by: Noam Rathaus <noamr@ssd-disclosure.com>
Fixes: 73c618456dc5 ("mctp: locking, lifetime and validity changes for sk_keys")
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dsa/tag_sja1105.c')
0 files changed, 0 insertions, 0 deletions