diff options
| author | Lorenzo Colitti <lorenzo@google.com> | 2015-09-15 00:14:23 +0900 |
|---|---|---|
| committer | Mister Oyster <oysterized@gmail.com> | 2017-04-17 10:57:31 +0200 |
| commit | bcc91adb7f16e2a24a5a4c676b03e9c061c0f539 (patch) | |
| tree | 3030db23c15fd598c58730db61b1afb9a22bd8ea /include/linux | |
| parent | 2dd0ccb74bc6162efd6723055f6b7d27d52f4ed8 (diff) | |
Fix NULL pointer dereference in tcp_nuke_addr.
tcp_nuke addr only grabs the bottom half socket lock, but not the
userspace socket lock. This allows a userspace program to call
close() while the socket is running, which causes a NULL pointer
dereference in inet_put_port.
Bug: 23663111
Bug: 24072792
Change-Id: Iecb63af68c2db4764c74785153d1c9054f76b94f
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions