Xuanqiang LuoandGreg Kroah-Hartman 51a05edfec llc: fix SAP refcount leak when creating incoming sockets ...

commit 2c72eb6286 upstream.

llc_sap_add_socket() takes a SAP reference for each socket added to a SAP,
and llc_sap_remove_socket() releases it. llc_create_incoming_sock() takes
an additional SAP reference after adding the child socket.

This extra reference was balanced by an explicit llc_sap_put() in
llc_ui_release() until commit 3100aa9d74 ("llc: fix SAP reference
counting w.r.t. socket handling") removed that put. The corresponding hold
in the accept path was left behind.

When such a child socket is removed, only the reference taken by
llc_sap_add_socket() is released. The extra reference keeps the SAP alive
after its last socket is removed. Remove the obsolete hold.

Fixes: 3100aa9d74 ("llc: fix SAP reference counting w.r.t. socket handling")
Cc: stable@vger.kernel.org
Signed-off-by: Xuanqiang Luo <luoxuanqiang@kylinos.cn>
Link: https://patch.msgid.link/20260712130343.518797-1-xuanqiang.luo@linux.dev
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-07-24 15:55:10 +02:00

..

af_llc.c

llc: fix SAP refcount leak in llc_ui_autobind()

2026-07-24 15:55:09 +02:00

Kconfig

…

llc_c_ac.c

…

llc_c_ev.c

…

llc_c_st.c

…

llc_conn.c

llc: fix SAP refcount leak when creating incoming sockets

2026-07-24 15:55:10 +02:00

llc_core.c

…

llc_if.c

…

llc_input.c

…

llc_output.c

…

llc_pdu.c

…

llc_proc.c

…

llc_s_ac.c

llc: do not use skb_get() before dev_queue_xmit()

2025-03-13 12:53:17 +01:00

llc_s_ev.c

…

llc_s_st.c

…

llc_sap.c

…

llc_station.c

…

Makefile

…

sysctl_net_llc.c

…