Thread (3 messages) 3 messages, 3 authors, 2026-03-13

Re: [PATCH net v2] net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-03-13 02:50:15
Also in: linux-hams, lkml

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Wed, 11 Mar 2026 15:06:02 +0800 you wrote:
From: Jiayuan Chen <redacted>

syzkaller reported a bug [1], and the reproducer is available at [2].

ROSE sockets use four sk->sk_state values: TCP_CLOSE, TCP_LISTEN,
TCP_SYN_SENT, and TCP_ESTABLISHED. rose_connect() already rejects
calls for TCP_ESTABLISHED (-EISCONN) and TCP_CLOSE with SS_CONNECTING
(-ECONNREFUSED), but lacks a check for TCP_SYN_SENT.

[...]
Here is the summary with links:
  - [net,v2] net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect
    https://git.kernel.org/netdev/net/c/e1f0a18c9564

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help