Re: [PATCH net] selinux: use sk_to_full_sk() in selinux_ip_output()
From: Paul Moore <paul@paul-moore.com>
Date: 2024-12-03 20:50:57
Also in:
selinux
From: Paul Moore <paul@paul-moore.com>
Date: 2024-12-03 20:50:57
Also in:
selinux
On Sat, Nov 30, 2024 at 4:50 PM [off-list ref] wrote:
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski [off-list ref]:
Jakub, do you know when we can expect to see this sent up to Linus?
On Tue, 26 Nov 2024 14:59:11 +0000 you wrote:quoted
In blamed commit, TCP started to attach timewait sockets to some skbs. syzbot reported that selinux_ip_output() was not expecting them yet. Note that using sk_to_full_sk() is still allowing the following sk_listener() check to work as before. [...]Here is the summary with links: - [net] selinux: use sk_to_full_sk() in selinux_ip_output() https://git.kernel.org/netdev/net/c/eedcad2f2a37 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
-- paul-moore.com