Re: [PATCH] ax25: fix UAF bugs of net_device caused by rebinding operation

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (master)
by David S. Miller <davem@xxxxxxxxxxxxx>:

On Wed,  9 Feb 2022 20:53:45 +0800 you wrote:
> The ax25_kill_by_device() will set s->ax25_dev = NULL and
> call ax25_disconnect() to change states of ax25_cb and
> sock, if we call ax25_bind() before ax25_kill_by_device().
> 
> However, if we call ax25_bind() again between the window of
> ax25_kill_by_device() and ax25_dev_device_down(), the values
> and states changed by ax25_kill_by_device() will be reassigned.
> 
> [...]

Here is the summary with links:
  - ax25: fix UAF bugs of net_device caused by rebinding operation
    https://git.kernel.org/netdev/net/c/feef318c855a

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html