Linux Kernel IPv6 ip6_send_skb slab-use-after-free fix

From this webpage screenshot, we can extract the following key information about the vulnerability: 1. Vulnerability Description: - The vulnerability occurs in the function, involving the IPv6 protocol stack. - The description states: After returns, cannot be safely referenced unless is held. 2. Fix Measures: - The fix involves adding and statements in the function to ensure the lock is held when referencing . - Another potential issue is addressed in the function, but details are not elaborated in the screenshot. 3. Related Code: - The fix is located in the file. - The code diff shown at the bottom of the screenshot includes the added and statements. 4. Reporting and Validation: - The vulnerability was reported by syzbot and validated on Google Compute Engine. - The vulnerability ID is . 5. Author and Reviewers: - The patch was submitted by Eric Dumazet and reviewed by syzbot, Sasha Levin, and David Ahern. 6. Related Patch: - This patch is related to , which reports a slab use-after-free issue. This information indicates that the vulnerability is related to memory management in the IPv6 protocol stack, and the fix introduces locking mechanisms to ensure synchronization when referencing specific data structures.

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel IPv6 ip6_send_skb slab-use-after-free fix