Thread (2 messages) flat view 2 messages, 2 authors, 28d ago

Re: [PATCH net v4] psp: fix NULL genl_sock deref race with concurrent netns teardown

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-07-30 00:00:59
Also in: lkml

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Mon, 27 Jul 2026 03:16:28 -0700 you wrote:
The race occurs between network namespace removal and PSP device
unregistration.  When a netns is deleted while a PSP device associated
with that netns is concurrently being removed, psp_dev_unregister()
triggers psp_nl_notify_dev() to send a device change notification.
Concurrently, cleanup_net() running in the netns workqueue calls
genl_pernet_exit(), which sets net->genl_sock to NULL. If
genl_pernet_exit() wins the race, two sites in psp_nl_multicast_per_ns()
then dereference the NULL socket and crash:

[...]
Here is the summary with links:
  - [net,v4] psp: fix NULL genl_sock deref race with concurrent netns teardown
    https://git.kernel.org/netdev/net/c/fc9c7ca5fcbf

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help