From: Jakub Kicinski Date: Tue, 22 Nov 2022 04:45:28 +0000 (-0800) Subject: Merge branch 'tipc-fix-two-race-issues-in-tipc_conn_alloc' X-Git-Tag: v6.1~81^2~33 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=3349c272de07c75ebe0e6362b58db2d4502e75d2;p=platform%2Fkernel%2Flinux-starfive.git Merge branch 'tipc-fix-two-race-issues-in-tipc_conn_alloc' Xin Long says: ==================== tipc: fix two race issues in tipc_conn_alloc The race exists beteen tipc_topsrv_accept() and tipc_conn_close(), one is allocating the con while the other is freeing it and there is no proper lock protecting it. Therefore, a null-pointer-defer and a use-after-free may be triggered, see details on each patch. ==================== Link: https://lore.kernel.org/r/cover.1668807842.git.lucien.xin@gmail.com Signed-off-by: Jakub Kicinski --- 3349c272de07c75ebe0e6362b58db2d4502e75d2