On Fri, May 27, 2016 at 09:19:48AM -0700, Cong Wang wrote:
>
> This one looks different though, this time the bug is
> triggered in netlink_sock_destruct(), where all the sock
> ref should be gone, which means it is impossible to refer
> nlk->cb anywhere else. Hmm... I have no idea how
> could this
On Thu, May 26, 2016 at 8:06 AM, Eric Dumazet wrote:
> On Thu, 2016-05-26 at 22:48 +0800, Baozeng Ding wrote:
>> Hi all,
>> I've got the following report use-after-free in netlink_sock_destruct while
>> running syzkaller.
>> Unfortunately no reproducer.The kernel version is 4.6 (May 15, on commit
On 2016/5/26 23:06, Eric Dumazet wrote:
> On Thu, 2016-05-26 at 22:48 +0800, Baozeng Ding wrote:
>> Hi all,
>> I've got the following report use-after-free in netlink_sock_destruct while
>> running syzkaller.
>> Unfortunately no reproducer.The kernel version is 4.6 (May 15, on commit
>> 2dcd0af
On Thu, 2016-05-26 at 22:48 +0800, Baozeng Ding wrote:
> Hi all,
> I've got the following report use-after-free in netlink_sock_destruct while
> running syzkaller.
> Unfortunately no reproducer.The kernel version is 4.6 (May 15, on commit
> 2dcd0af568b0cf583645c8a317dd12e344b1c72a). Thanks.
>
>
