diff options
| author | Steffen Klassert <steffen.klassert@secunet.com> | 2023-10-20 10:05:55 +0200 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2023-10-23 07:10:39 +0200 |
| commit | 53a5b4f2ea858482a427878bca988a7fa9b2ebdc (patch) | |
| tree | 71c0b126d64e2ef18f89796fdc56776d1f704f17 /samples/vfs | |
| parent | Merge branch 'xfrm: policy: replace session decode with flow dissector' (diff) | |
| download | linux-53a5b4f2ea858482a427878bca988a7fa9b2ebdc.tar.xz linux-53a5b4f2ea858482a427878bca988a7fa9b2ebdc.zip | |
xfrm Fix use after free in __xfrm6_udp_encap_rcv.
A recent patch changed xfrm6_udp_encap_rcv to not
free the skb itself anymore but fogot the case
where xfrm4_udp_encap_rcv is called subsequently.
Fix this by moving the call to xfrm4_udp_encap_rcv
from __xfrm6_udp_encap_rcv to xfrm6_udp_encap_rcv.
Fixes: 221ddb723d90 ("xfrm: Support GRO for IPv6 ESP in UDP encapsulation")
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'samples/vfs')
0 files changed, 0 insertions, 0 deletions