diff options
| author | Toke Høiland-Jørgensen | 2019-01-09 17:09:42 +0100 |
|---|---|---|
| committer | David S. Miller | 2019-01-16 05:12:00 +0100 |
| commit | f6bab199315b70fd83fe3ee0947bc84c7a35f3d4 (patch) | |
| tree | c662d696e0bfe2ee2be86cbdf0da095d9d6389ba /tools | |
| parent | ip6_gre: update version related info when changing link (diff) | |
| download | kernel-qcow2-linux-f6bab199315b70fd83fe3ee0947bc84c7a35f3d4.tar.gz kernel-qcow2-linux-f6bab199315b70fd83fe3ee0947bc84c7a35f3d4.tar.xz kernel-qcow2-linux-f6bab199315b70fd83fe3ee0947bc84c7a35f3d4.zip | |
sched: Avoid dereferencing skb pointer after child enqueue
Parent qdiscs may dereference the pointer to the enqueued skb after
enqueue. However, both CAKE and TBF call consume_skb() on the original skb
when splitting GSO packets, leading to a potential use-after-free in the
parent. Fix this by avoiding dereferencing the skb pointer after enqueueing
to the child.
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions