Re: [PATCH net 2/2] net: call cgroup_sk_alloc() earlier in sk_clone_lock()
From: David Miller <davem@davemloft.net>
Date: 2017-10-11 03:24:48
From: Eric Dumazet <edumazet@google.com> Date: Tue, 10 Oct 2017 19:12:33 -0700
If for some reason, the newly allocated child need to be freed,
we will call cgroup_put() (via sk_free_unlock_clone()) while the
corresponding cgroup_get() was not yet done, and we will free memory
too soon.
Fixes: d979a39d7242 ("cgroup: duplicate cgroup reference when cloning sockets")
Signed-off-by: Eric Dumazet <edumazet@google.com>Applied and queued up for -stable.