mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-14 06:35:12 +00:00
2030043e61
This patch fixes a Use-after-Free found by the syzbot.
The problem is that a skb is taken from the per-session skb queue,
without incrementing the ref count. This leads to a Use-after-Free if
the skb is taken concurrently from the session queue due to a CTS.
Fixes:
|
||
---|---|---|
.. | ||
address-claim.c | ||
bus.c | ||
j1939-priv.h | ||
Kconfig | ||
main.c | ||
Makefile | ||
socket.c | ||
transport.c |