Eric Dumazet ed4e2f9f7e net/sched: sch_drr: annotate data-races around cl->deficit ...

[ Upstream commit c67b104fd7 ]

drr_dump_class_stats() runs without qdisc spinlock held.

Add missing READ_ONCE()/WRITE_ONCE() annotations around cl->deficit.

Fixes: edb09eb17e ("net: sched: do not acquire qdisc spinlock in qdisc/class stats dump")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Link: https://patch.msgid.link/20260519094618.2632073-2-edumazet@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-07-24 16:03:01 +02:00

..

6lowpan

6lowpan: fix NHC entry use-after-free on error path

2026-07-24 16:02:43 +02:00

9p

9p: avoid putting oldfid in p9_client_walk() error path

2026-07-04 13:42:27 +02:00

802

net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr

2026-06-19 13:39:28 +02:00

8021q

…

appletalk

…

atm

atm: lec: fix use-after-free in sock_def_readable()

2026-04-11 14:19:17 +02:00

ax25

…

batman-adv

batman-adv: tvlv: avoid race of cifsnotfound handler state

2026-07-04 13:42:24 +02:00

bluetooth

Bluetooth: L2CAP: validate option length before reading conf opt value

2026-07-24 16:02:46 +02:00

bpf

bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb

2026-05-23 13:03:09 +02:00

bpfilter

…

bridge

netfilter: ebtables: terminate table name before find_table_lock()

2026-07-24 16:02:45 +02:00

caif

net: caif: clear client service pointer on teardown

2026-05-17 17:13:27 +02:00

can

can: raw: fix ro->uniq use-after-free in raw_rcv()

2026-04-27 07:23:29 -06:00

ceph

libceph: handle rbtree insertion error in decode_choose_args()

2026-05-23 13:03:33 +02:00

core

net: Drop the lock in skb_may_tx_timestamp()

2026-07-24 16:02:40 +02:00

dcb

…

dccp

…

devlink

…

dns_resolver

…

dsa

net: dsa: properly keep track of conduit reference

2026-03-25 11:06:00 +01:00

ethernet

bonding: prevent potential infinite loop in bond_header_parse()

2026-07-24 16:02:38 +02:00

ethtool

ethtool: eeprom: add more safeties to EEPROM Netlink fallback

2026-06-19 13:39:11 +02:00

handshake

…

hsr

net: hsr: defer node table free until after RCU readers

2026-06-19 13:39:39 +02:00

ieee802154

ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()

2026-06-19 13:39:28 +02:00

ife

…

ipv4

net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes

2026-07-24 16:02:45 +02:00

ipv6

ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD

2026-07-24 16:03:01 +02:00

iucv

net/iucv: fix locking in .getsockopt

2026-06-19 13:39:10 +02:00

kcm

…

key

net: af_key: initialize alg_key_len for IPComp states

2026-07-24 16:02:45 +02:00

l2tp

l2tp: Drop large packets with UDP encap

2026-04-27 07:23:29 -06:00

l3mdev

…

lapb

…

llc

…

mac80211

wifi: mac80211: check tdls flag in ieee80211_tdls_oper

2026-06-01 17:43:04 +02:00

mac802154

bonding: prevent potential infinite loop in bond_header_parse()

2026-07-24 16:02:38 +02:00

mctp

net: mctp: ensure our nlmsg responses are initialised

2026-06-19 13:39:08 +02:00

mpls

mpls: add missing unregister_netdevice_notifier to mpls_init

2026-03-25 11:06:06 +01:00

mptcp

mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation

2026-07-04 13:42:20 +02:00

ncsi

net: ncsi: fix skb leak in error paths

2026-03-25 11:05:53 +01:00

netfilter

netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump

2026-07-24 16:02:45 +02:00

netlabel

netlabel: validate unlabeled address and mask attribute lengths

2026-06-19 13:39:29 +02:00

netlink

genetlink: Use internal flags for multicast groups

2026-06-19 13:39:38 +02:00

netrom

netrom: fix double-free in nr_route_frame()

2026-01-30 10:27:40 +01:00

nfc

nfc: hci: fix out-of-bounds read in HCP header parsing

2026-06-19 13:39:19 +02:00

nsh

…

openvswitch

net: openvswitch: fix possible kfree_skb of ERR_PTR

2026-06-19 13:39:30 +02:00

packet

net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd()

2026-04-27 07:23:35 -06:00

phonet

bonding: prevent potential infinite loop in bond_header_parse()

2026-07-24 16:02:38 +02:00

psample

genetlink: Use internal flags for multicast groups

2026-06-19 13:39:38 +02:00

qrtr

net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove

2026-06-19 13:39:29 +02:00

rds

net: rds: clear i_sends on setup unwind

2026-06-19 13:39:35 +02:00

rfkill

net: rfkill: prevent unlimited numbers of rfkill events from being created

2026-04-18 10:39:50 +02:00

rose

net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect

2026-03-25 11:06:06 +01:00

rxrpc

rxrpc: Fix leak of released call in recvmsg(MSG_PEEK)

2026-07-24 16:02:57 +02:00

sched

net/sched: sch_drr: annotate data-races around cl->deficit

2026-07-24 16:03:01 +02:00

sctp

sctp: stream: fully roll back denied add-stream state

2026-06-19 13:39:36 +02:00

smc

net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS

2026-06-19 13:39:25 +02:00

strparser

net: strparser: fix skb_head leak in strp_abort_strp()

2026-05-17 17:13:27 +02:00

sunrpc

sunrpc: fix cache_request leak in cache_release

2026-03-25 11:06:02 +01:00

switchdev

…

tipc

tipc: fix out-of-bounds read in broadcast Gap ACK blocks

2026-07-24 16:02:43 +02:00

tls

net: skmsg: preserve sg.copy across SG transforms

2026-07-04 13:42:25 +02:00

unix

af_unix: Set gc_in_progress to true in unix_gc().

2026-07-04 13:42:25 +02:00

vmw_vsock

vsock/vmci: fix sk_ack_backlog leak on failed handshake

2026-06-19 13:39:34 +02:00

wireless

wifi: cfg80211: fix grammar in MLO group key error message

2026-07-24 16:02:58 +02:00

x25

net/x25: Fix overflow when accumulating packets

2026-04-11 14:19:24 +02:00

xdp

xsk: validate MTU against usable frame size on bind

2026-04-27 07:23:28 -06:00

xfrm

xfrm: espintcp: do not reuse an in-progress partial send

2026-06-19 13:39:32 +02:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

net: Drop the lock in skb_may_tx_timestamp()

2026-07-24 16:02:40 +02:00

sysctl_net.c

…