diff options
| author | David S. Miller <[email protected]> | 2021-04-13 21:31:52 +0000 |
|---|---|---|
| committer | David S. Miller <[email protected]> | 2021-04-13 21:31:52 +0000 |
| commit | 61aaa1aa9a8f83dbdc763c6939568952a2a30c90 (patch) | |
| tree | af104bd38ed916d57ef820e71d9f3e8873539a9b /net/ipv4/sysctl_net_ipv4.c | |
| parent | Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf (diff) | |
| parent | net: ip6_tunnel: Unregister catch-all devices (diff) | |
| download | kernel-61aaa1aa9a8f83dbdc763c6939568952a2a30c90.tar.gz kernel-61aaa1aa9a8f83dbdc763c6939568952a2a30c90.zip | |
Merge branch 'catch-all-devices'
Hristo Venev says:
====================
net: Fix two use-after-free bugs
The two patches fix two use-after-free bugs related to cleaning up
network namespaces, one in sit and one in ip6_tunnel. They are easy to
trigger if the user has the ability to create network namespaces.
The bugs can be used to trigger null pointer dereferences. I am not
sure if they can be exploited further, but I would guess that they
can. I am not sending them to the mailing list without confirmation
that doing so would be OK.
====================
Signed-off-by: David S. Miller <[email protected]>
Diffstat (limited to 'net/ipv4/sysctl_net_ipv4.c')
0 files changed, 0 insertions, 0 deletions