[SRU OEM-5.14, OEM-5.17 0/1] net: sched: Fix use after free in red_enqueue()

Cengiz Can cengiz.can at canonical.com
Fri Apr 21 01:34:05 UTC 2023


BugLink: https://bugs.launchpad.net/bugs/2017013

[Impact]
We can't use "skb" again after passing it to qdisc_enqueue(). This is
basically identical to commit 2f09707 ("sch_sfb: Also store skb
len before calling child enqueue").

Fixes: d7f4f33 ("sch_red: update backlog as well")

[Fix]
Cherry picked from upstream.

[Test case]
Compile, boot and basic network functionality tested using ntop.

[Potential regression]
Low. This has been in multiple trees for a while now.

Dan Carpenter (1):
  net: sched: Fix use after free in red_enqueue()

 net/sched/sch_red.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

-- 
2.37.2




More information about the kernel-team mailing list