Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <[email protected]>:
On Sun, 20 Sep 2026 19:08:43 +0800 you wrote:
> br_mdb_flush_pgs() keeps a pointer-to-pointer cursor while walking
> mp->ports. br_multicast_del_pg() can re-enter the same MDB entry through
> br_multicast_sg_del_exclude_ports() and unlink other port groups. If the
> cursor points into one of those groups, the next iteration dereferences a
> stale cursor and can leave mp->ports pointing at freed memory.
>
> A following RTM_GETMDB exposes the dangling pointer:
>
> [...]
Here is the summary with links:
- [net] net: bridge: mdb: restart port group walk after deletion
https://git.kernel.org/netdev/net/c/ab1404ac8115
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
