This patchset fixes a use-after-free triggered by syzbot. Please find more details in each patch description.
--- Cong Wang (2): net_sched: defer tcf_idr_insert() in tcf_action_init_1() net_sched: commit action insertions together include/net/act_api.h | 2 -- net/sched/act_api.c | 52 +++++++++++++++++++++++++------------- net/sched/act_bpf.c | 4 +-- net/sched/act_connmark.c | 1 - net/sched/act_csum.c | 3 --- net/sched/act_ct.c | 2 -- net/sched/act_ctinfo.c | 3 --- net/sched/act_gact.c | 2 -- net/sched/act_gate.c | 3 --- net/sched/act_ife.c | 3 --- net/sched/act_ipt.c | 2 -- net/sched/act_mirred.c | 2 -- net/sched/act_mpls.c | 2 -- net/sched/act_nat.c | 3 --- net/sched/act_pedit.c | 2 -- net/sched/act_police.c | 2 -- net/sched/act_sample.c | 2 -- net/sched/act_simple.c | 2 -- net/sched/act_skbedit.c | 2 -- net/sched/act_skbmod.c | 2 -- net/sched/act_tunnel_key.c | 3 --- net/sched/act_vlan.c | 2 -- 22 files changed, 35 insertions(+), 66 deletions(-) -- 2.28.0
