[BUG] [ROSE] slab-use-after-free in lock_timer_base

(off-list ancestor, not in this archive)
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · F6BVP <hidden> · 2025-09-01
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · Eric Dumazet <edumazet@google.com> · 2025-09-01
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · David Ranch <hidden> · 2025-09-01
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · Eric Dumazet <edumazet@google.com> · 2025-09-01
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · F6BVP <hidden> · 2025-09-02
Re: [ROSE] [AX25] 6.15.10 long term stable kernel oops · Eric Dumazet <edumazet@google.com> · 2025-09-02
[BUG] [ROSE] slab-use-after-free in lock_timer_base · Bernard Pidoux <hidden> · 2025-09-03
Re: [BUG] [ROSE] slab-use-after-free in lock_timer_base · Eric Dumazet <edumazet@google.com> · 2025-09-03
Re: [BUG] [ROSE] slab-use-after-free in lock_timer_base · F6BVP <hidden> · 2025-09-03
Re: Re: [BUG] [ROSE] slab-use-after-free in lock_timer_base · Takamitsu Iwai <hidden> · 2025-09-03

From: Bernard Pidoux <hidden>
Date: 2025-09-03 09:51:53
Also in: linux-hams

On 6.16.4 kernel patched with last ROSE commit for refcount use 
rose_remove_node() is causing refcount_t: underflow; use-after-free

List:       linux-stable-commits
Subject:    Patch "net: rose: split remove and free operations in 
rose_remove_neigh()" has been added to the 6.1
From:       Sasha Levin <sashal () kernel ! org>
Date:       2025-08-30 20:20:24
Message-ID: 20250830202024.2485006-1-sashal () kernel ! org

Bernard Pidoux
F6BVP / AI7BG

Attachments

slab-use-after-free [text/plain] 23665 bytes · preview

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help