linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-03 12:05:13 +02:00

Files

Hangbin Liu 9433ba79c2 hsr: hold rcu and dev lock for hsr_get_port_ndev

[ Upstream commit 847748fc66 ]

hsr_get_port_ndev calls hsr_for_each_port, which need to hold rcu lock.
On the other hand, before return the port device, we need to hold the
device reference to avoid UaF in the caller function.

Suggested-by: Paolo Abeni <pabeni@redhat.com>
Fixes: 9c10dd8eed ("net: hsr: Create and export hsr_get_port_ndev()")
Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/20250905091533.377443-4-liuhangbin@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
[ Drop multicast filtering changes ]
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-01-08 10:14:27 +01:00

hsr_debugfs.c

…

hsr_device.c

hsr: hold rcu and dev lock for hsr_get_port_ndev

2026-01-08 10:14:27 +01:00

hsr_device.h

…

hsr_forward.c

net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()

2026-01-08 10:14:08 +01:00

hsr_forward.h