Re: [PATCH 1/2] nfc: llcp: Fix use-after-free in llcp_sock_release()
From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-05-01 23:28:01
Also in:
lkml
From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-05-01 23:28:01
Also in:
lkml
On Wed, 29 Apr 2026 13:40:41 +0000 Lee Jones wrote:
llcp_sock_release() unconditionally unlinks the socket from the local
sockets list. However, if the socket is still in connecting state, it
is on the connecting list.
Fix this by checking the socket state and unlinking from the correct list.
Fixes: b4011239a08e ("NFC: llcp: Fix non blocking sockets connections")
Signed-off-by: Lee Jones <lee@kernel.org>Adding David H and dropping from netdev's patchwork..