Netdev List
 help / color / mirror / Atom feed
 messages from 2026-06-02 18:52:22 to 2026-06-02 20:07:34 UTC [more...]

[PATCH v2 iproute2-next] iplink_geneve: Support IFLA_GENEVE_LOCAL and IFLA_GENEVE_LOCAL6
 2026-06-02 20:07 UTC  (3+ messages)

[PATCH v1 iproute2-next] iplink_geneve: Support IFLA_GENEVE_LOCAL and IFLA_GENEVE_LOCAL6
 2026-06-02 20:06 UTC  (3+ messages)

[PATCH net-next 0/8] net: mdio: realtek-rtl9300: Refactor initialization and port lookup
 2026-06-02 20:02 UTC  (7+ messages)
` [PATCH net-next 1/8] net: mdio: realtek-rtl9300: Convert to fwnode API
    ` AW: "
` [PATCH net-next 8/8] net: mdio: realtek-rtl9300: Convert port lookup from O(n) to O(1)
    ` AW: "

[PATCH v6 0/3] Rust netlink support + use in Rust Binder
 2026-06-02 20:00 UTC  (5+ messages)
` [PATCH v6 1/3] rust: net: add rust/kernel/net to NETWORKING [GENERAL]
` [PATCH v6 2/3] rust: netlink: add raw netlink abstraction

[PATCH net v2] netdevsim: fib: fix use-after-free of FIB data via debugfs
 2026-06-02 20:00 UTC  (2+ messages)

[PATCH net-next] selftests: drv-net: tso: add new tests for ip6tnl, ipip, and sit tunnels
 2026-06-02 20:00 UTC  (2+ messages)

[PATCH net v2 0/2] netdevsim: psp: fix issues with stats collection
 2026-06-02 20:00 UTC  (2+ messages)

KASAN: slab-out-of-bounds Write in mini_qdisc_pair_swap (net/sched/sch_generic.c) -- lifetime analysis and proposed fix
 2026-06-02 19:47 UTC 

[PATCH iproute2-next] iplink: add support for setting IPv4 devconf parameters
 2026-06-02 19:46 UTC  (3+ messages)

[PATCH net-next v2] hsr: broadcast netlink notifications in the device's net namespace
 2026-06-02 19:43 UTC  (3+ messages)

Hello netdev maintainers, I would like to report a slab-out-of-bounds write reachable through mini_qdisc_pair_swap() during clsact/ingress qdisc teardown, and to propose a fix grounded in an analysis of the actual object lifetimes involved. A first cut at this report suggested a check of the form "miniq_old == &miniqp->miniq1 || miniq_old == &miniqp->miniq2" inside mini_qdisc_pair_swap(); on closer reading of the code that check is incorrect, and the fix belongs in the teardown path instead. Details below. Bug --- KASAN: slab-out-of-bounds Write in mini_qdisc_pair_swap File: net/sched/sch_generic.c Function: mini_qdisc_pair_swap() Affected versions ----------------- - linux-6.1.133 - linux-6.12.91 - mainline (as of this report) Faulting write -------------- Inside mini_qdisc_pair_swap(), at the tail: if (miniq_old) miniq_old->rcu_state = start_poll_synchronize_rcu(); miniq_old is taken from rcu_dereference_protected(*miniqp->p_miniq, 1) and, in a correct
 2026-06-02 19:33 UTC 

[PATCH net-next] ipv4: raw: remove six obsolete EXPORT_SYMBOL_GPL()
 2026-06-02 19:25 UTC  (2+ messages)

[PATCH v2 net] ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
 2026-06-02 19:24 UTC  (2+ messages)

[PATCH v1 net-next] hsr: Remove WARN_ONCE() in hsr_addr_is_self()
 2026-06-02 19:20 UTC  (2+ messages)

[PATCH net] net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
 2026-06-02 19:20 UTC  (2+ messages)

linux-next: build failure after merge of the security tree
 2026-06-02 19:16 UTC  (4+ messages)

[BUG] net/sched: HFSC + fq_codel stall on 6.6.116 (qdisc_tree_reduce_backlog / qlen_notify)
 2026-06-02 19:12 UTC 

[PATCH net-next v2 01/15] batman-adv: drop batman-adv specific version
 2026-06-02 19:10 UTC  (2+ messages)

[PATCH net 1/9] netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
 2026-06-02 19:10 UTC  (2+ messages)

[PATCH bpf-next 1/1] bpf: Silence unused-but-set-variable warning in bpf_for_each_reg_in_vstate_mask
 2026-06-02 19:10 UTC  (2+ messages)

[PATCH v11 2/2] selftests: net: add local ECMP rehash test
 2026-06-02 19:06 UTC  (3+ messages)

[PATCH v5 net-next 0/5] geneve: Allow binding UDP socket to a specific address
 2026-06-02 19:03 UTC  (6+ messages)
` [PATCH v5 net-next 1/5] geneve: Reuse ipv6_addr_type() result in geneve_nl2info()
` [PATCH v5 net-next 2/5] geneve: Pass struct geneve_dev to geneve_create_sock()
` [PATCH v5 net-next 3/5] geneve: Pass struct geneve_dev to geneve_find_sock()
` [PATCH v5 net-next 4/5] geneve: Add dualstack flag to struct geneve_config
` [PATCH v5 net-next 5/5] geneve: Introduce IFLA_GENEVE_LOCAL and IFLA_GENEVE_LOCAL6

[PATCH] mpls: refactor mpls_dev_notify() to use guard(mutex)
 2026-06-02 19:03 UTC  (2+ messages)

[PATCH v1 net-next] af_unix: Remove sock->state assignment
 2026-06-02 19:00 UTC  (2+ messages)

[PATCH v1 net] net: Annotate sk->sk_write_space() for UDP SOCKMAP
 2026-06-02 19:00 UTC  (2+ messages)

[PATCH v2 net] tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req()
 2026-06-02 19:00 UTC  (2+ messages)

bnxt_en: suspicious RCU usage in bnxt_fw_reset_task() qdisc path in 7.1-rc6
 2026-06-02 18:53 UTC  (3+ messages)

[PATCH v11 1/2] tcp: rehash onto different local ECMP path on retransmit timeout
 2026-06-02 18:52 UTC  (2+ messages)

[PATCH] net: qrtr: fix node refcount leak on ctrl packet alloc failure
 2026-06-02 18:52 UTC  (2+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox