Re: [PATCH net 1/7] ipvs: fix NULL deref in ip_vs_add_service error path

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to netdev/net.git (main)
by Florian Westphal <fw@strlen.de>:

On Wed,  8 Apr 2026 18:35:06 +0200 you wrote:
> From: Weiming Shi <bestswngs@gmail.com>
> 
> When ip_vs_bind_scheduler() succeeds in ip_vs_add_service(), the local
> variable sched is set to NULL.  If ip_vs_start_estimator() subsequently
> fails, the out_err cleanup calls ip_vs_unbind_scheduler(svc, sched)
> with sched == NULL.  ip_vs_unbind_scheduler() passes the cur_sched NULL
> check (because svc->scheduler was set by the successful bind) but then
> dereferences the NULL sched parameter at sched->done_service, causing a
> kernel panic at offset 0x30 from NULL.
> 
> [...]

Here is the summary with links:
  - [net,1/7] ipvs: fix NULL deref in ip_vs_add_service error path
    https://git.kernel.org/netdev/net/c/9a91797e61d2
  - [net,2/7] netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator
    https://git.kernel.org/netdev/net/c/1f3083aec883
  - [net,3/7] netfilter: xt_multiport: validate range encoding in checkentry
    https://git.kernel.org/netdev/net/c/ff64c5bfef12
  - [net,4/7] netfilter: ip6t_eui64: reject invalid MAC header for all packets
    https://git.kernel.org/netdev/net/c/fdce0b3590f7
  - [net,5/7] netfilter: nft_ct: fix use-after-free in timeout object destroy
    https://git.kernel.org/netdev/net/c/f8dca15a1b19
  - [net,6/7] netfilter: nfnetlink_queue: make hash table per queue
    https://git.kernel.org/netdev/net/c/936206e3f6ff
  - [net,7/7] selftests: nft_queue.sh: add a parallel stress test
    https://git.kernel.org/netdev/net/c/dde1a6084c5c

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html