Re: [PATCH net] sock_diag: fix use-after-free read in __sk_free
From: David Miller <davem@davemloft.net>
Date: 2018-05-18 17:48:40
From: Eric Dumazet <edumazet@google.com> Date: Fri, 18 May 2018 04:47:55 -0700
We must not call sock_diag_has_destroy_listeners(sk) on a socket that has no reference on net structure.
...
Fixes: b922622ec6ef ("sock_diag: don't broadcast kernel sockets")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Craig Gallek <redacted>
Reported-by: syzbot <redacted>Applied and queued up for -stable, thanks Eric.