mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-08-26 19:00:25 +00:00
![]() sock_efree() releases the sock refcnt, if we don't hold this refcnt
when setting skb->destructor to it, the refcnt would not be balanced.
This leads to several bug reports from syzbot.
I have checked other users of sock_efree(), all of them hold the
sock refcnt.
Fixes:
|
||
---|---|---|
.. | ||
af_netrom.c | ||
Makefile | ||
nr_dev.c | ||
nr_in.c | ||
nr_loopback.c | ||
nr_out.c | ||
nr_route.c | ||
nr_subr.c | ||
nr_timer.c | ||
sysctl_net_netrom.c |