Re: Fw: Linux tcp_xmit_retransmit_queue use after free on 4.8-rc1 / master]

On Tue, 2016-08-16 at 12:45 +0200, Greg KH wrote:

For some reason Marco's emails can't make it to netdev, so I'm
forwarding this on.  Please cc: him on responses.

Thanks for the report Greg and Marco.

My first guess is this is caused by 

d41a69f1d390 tcp: make tcp_sendmsg() aware of socket backlog

And a combination of funky sendmsg() flags (like FastOpen)

I will look at this problem today.