Thread (3 messages) 3 messages, 3 authors, 4d ago

Re: [PATCH net] mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n

From: Jakub Kicinski <kuba@kernel.org>
Date: 2026-07-21 19:33:13
Also in: lkml

On Sun, 12 Jul 2026 15:09:03 -0700 Xiang Mei wrote:
On CONFIG_INET=n, mpls_valid_fib_dump_req()'s local strict-check loop
enters the RTA_OIF arm on the index alone and calls nla_get_u32(tb[i]).
Since nlmsg_parse_deprecated_strict() leaves tb[i] NULL for any omitted
attribute, a dump without RTA_OIF dereferences NULL and oopses.
Someone else already fixed this
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help