Re: [PATCH v1 net] gtp: Fix use-after-free in __gtp_encap_destroy().

Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <kuba@kernel.org>: On Thu, 22 Jun 2023 14:32:31 -0700 you wrote:

syzkaller reported use-after-free in __gtp_encap_destroy(). [0]

It shows the same process freed sk and touched it illegally.

Commit e198987e7dd7 ("gtp: fix suspicious RCU usage") added lock_sock() and release_sock() in __gtp_encap_destroy() to protect sk->sk_user_data, but release_sock() is called after sock_put() releases the last refcnt.

[...]

Here is the summary with links: - [v1,net] gtp: Fix use-after-free in __gtp_encap_destroy(). https://git.kernel.org/netdev/net/c/ce3aee7114c5 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html