Re: [PATCH] net: bonding: fix use-after-free in bond_xmit_broadcast()

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

On Tue, Jun 16, 2026 at 02:41:37AM -0400, Kevin Berry wrote:
> > That worked, thanks!
> >
> > greg k-h
> 
> Glad to hear it!
> 
> It's also worth pointing out that because the fix for 6.12 was done
> without the ce7a381697cb3 ("net: bonding: add broadcast_neighbor
> option for 802.3ad") dependency, it conflicts with the c4f050ce06c56
> ("bonding: 3ad: implement proper RCU rules for port->aggregator") fix
> commit series that was applied to other trees. So for 6.12, I think it
> would make sense to:
> 
> 1. Revert the fix from this thread: 3453882f36c4 ("net: bonding: fix
> use-after-free in bond_xmit_broadcast()"),
> 2. Apply the patch series for c4f050ce06c56 ("bonding: 3ad: implement
> proper RCU rules for port->aggregator"), namely:
>     - Apply 4440873f36553 ("bonding: 802.3ad replace MAC_ADDRESS_EQUAL
> with __agg_has_partner")
>     - Apply ce7a381697cb3 ("net: bonding: add broadcast_neighbor
> option for 802.3ad")
>     - Apply 6b6dc81ee7e8c ("bonding: add support for per-port LACP
> actor priority")
>     - Apply 4916f2e2f3fc9 ("bonding: print churn state via netlink")
>     - Apply c4f050ce06c56 ("bonding: 3ad: implement proper RCU rules
> for port->aggregator")
> 3. Apply Xiang's original fix commit: 2884bf72fb8f ("net: bonding: fix
> use-after-free in bond_xmit_broadcast()").
> 
> That should make things consistent between 6.1, 6.6., and 6.12 with
> respect to those two fixes.

Please send a patch series that does this to make sure I get it correct.

thanks,

greg k-h