From: Ignat Korchagin <ig...@cloudflare.com> Date: Mon, 14 Oct 2024 16:38:00 +0100 > After sock_init_data() the allocated sk object is attached to the provided > sock object. On error, packet_create() frees the sk object leaving the > dangling pointer in the sock object on return. Some other code may try > to use this pointer and cause use-after-free. > > Suggested-by: Eric Dumazet <eduma...@google.com> > Signed-off-by: Ignat Korchagin <ig...@cloudflare.com>
Reviewed-by: Kuniyuki Iwashima <kun...@amazon.com>
