Re: [PATCH v1 net] gtp: Fix use-after-free in __gtp_encap_destroy().

Hello:

This patch was applied to netdev/net.git (main) by Jakub Kicinski kuba@kernel.org:

On Thu, 22 Jun 2023 14:32:31 -0700 you wrote:

syzkaller reported use-after-free in __gtp_encap_destroy(). [0]

It shows the same process freed sk and touched it illegally.

Commit e198987e7dd7 ("gtp: fix suspicious RCU usage") added lock_sock() and release_sock() in __gtp_encap_destroy() to protect sk->sk_user_data, but release_sock() is called after sock_put() releases the last refcnt.

[...]

Here is the summary with links: - [v1,net] gtp: Fix use-after-free in __gtp_encap_destroy(). https://git.kernel.org/netdev/net/c/ce3aee7114c5

You are awesome, thank you!