Skip to content
Snippets Groups Projects
Commit 18a7fc37 authored by Stefano Garzarella's avatar Stefano Garzarella Committed by Greg Kroah-Hartman
Browse files

vsock/virtio: discard packets if the transport changes


commit 2cb7c756f605ec02ffe562fb26828e4bcc5fdfc1 upstream.

If the socket has been de-assigned or assigned to another transport,
we must discard any packets received because they are not expected
and would cause issues when we access vsk->transport.

A possible scenario is described by Hyunwoo Kim in the attached link,
where after a first connect() interrupted by a signal, and a second
connect() failed, we can find `vsk->transport` at NULL, leading to a
NULL pointer dereference.

Fixes: c0cfa2d8 ("vsock: add multi-transports support")
Cc: stable@vger.kernel.org
Reported-by: default avatarHyunwoo Kim <v4bel@theori.io>
Reported-by: default avatarWongi Lee <qwerty@theori.io>
Closes: https://lore.kernel.org/netdev/Z2LvdTTQR7dBmPb5@v4bel-B760M-AORUS-ELITE-AX/


Signed-off-by: default avatarStefano Garzarella <sgarzare@redhat.com>
Reviewed-by: default avatarHyunwoo Kim <v4bel@theori.io>
Signed-off-by: default avatarPaolo Abeni <pabeni@redhat.com>
[SG: fixed context conflict since this tree is missing commit 71dc9ec9
 ("virtio/vsock: replace virtio_vsock_pkt with sk_buff")]
Signed-off-by: default avatarStefano Garzarella <sgarzare@redhat.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent a925a200
No related branches found
No related tags found
1 merge request!185🤖 Sync Bot: Update v5.10-ktn to Latest Stable Kernel (v5.10.234)
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment