Thread (3 messages) 3 messages, 3 authors, 7d ago

Re: [PATCH net v2] tipc: hold a reference to nodes found by link name

flat view

From: patchwork-bot+netdevbpf@kernel.org
Date: 2026-10-02 00:30:06
Also in: lkml, stable

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski [off-list ref]:

On Tue, 29 Sep 2026 00:12:46 +0800 you wrote:
tipc_node_find_by_name() returns a node after dropping its RCU read lock
without taking a reference.  The LINK_SET, LINK_GET and LINK_RESET_STATS
handlers then lock and access the node, racing with timer-driven cleanup of
a down peer.  Generic netlink serialization does not exclude the node
timer.

The following interleaving can leave a handler using a freed node:

[...]
Here is the summary with links:
  - [net,v2] tipc: hold a reference to nodes found by link name
    https://git.kernel.org/netdev/net/c/17e73bae400f

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help