diff options
| author | Antony Antony <antony.antony@secunet.com> | 2026-10-07 11:35:27 +0200 |
|---|---|---|
| committer | Steffen Klassert <steffen.klassert@secunet.com> | 2026-10-19 08:02:05 +0200 |
| commit | 3eb841b771e81e0692b3ebfc75fdb774022cc4f6 (patch) | |
| tree | 9b16b09e4a8b8e942b2f278e0fac1d5de6ee1e64 /include | |
| parent | 6362f459bfc485d805f0439ae4566c1b014abfa4 (diff) | |
xfrm: fix use-after-free of migrated state in xfrm_do_migrate_state()
A concurrent delete can free the migrated state before
xfrm_do_migrate_state() finishes using it.
Fixes: a9d155ea9b44 ("xfrm: add XFRM_MSG_MIGRATE_STATE for single SA migration")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Signed-off-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions