diff options
| author |   Jesse Gross <jesse@nicira.com> | 2014-12-16 18:25:32 -0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2014-12-18 12:38:13 -0500 |
| commit | 12069401d895ff84076a50189ca842c0696b84b2 (patch) | |
| tree | d93c1ec4635a9d2d64fff54d376e40da3a72e13e /MAINTAINERS | |
| parent | geneve: Remove socket and offload handlers at destruction. (diff) | |
| download | linux-dev-12069401d895ff84076a50189ca842c0696b84b2.tar.xz linux-dev-12069401d895ff84076a50189ca842c0696b84b2.zip | |
geneve: Fix races between socket add and release.
Currently, searching for a socket to add a reference to is not
synchronized with deletion of sockets. This can result in use
after free if there is another operation that is removing a
socket at the same time. Solving this requires both holding the
appropriate lock and checking the refcount to ensure that it
has not already hit zero.
Inspired by a related (but not exactly the same) issue in the
VXLAN driver.
Fixes: 0b5e8b8e ("net: Add Geneve tunneling protocol driver")
CC: Andy Zhou <azhou@nicira.com>
Signed-off-by: Jesse Gross <jesse@nicira.com>
Acked-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'MAINTAINERS')
0 files changed, 0 insertions, 0 deletions