Hello David Carlier.

On Thu, 09 Jul 2026 23:18:58 +0100, David Carlier wrote:
> hwsim_update_pib() does an unserialized read-swap-free of phy->pib:
> 
>       pib_old = rtnl_dereference(phy->pib);
>       ...
>       rcu_assign_pointer(phy->pib, pib);
>       kfree_rcu(pib_old, rcu);
> 
> [...]

Applied to wpan/wpan.git, thanks!

[1/1] ieee802154: hwsim: serialize pib updates to fix double-free
      https://git.kernel.org/wpan/wpan/c/979d5b8de8ed

regards,
Stefan Schmidt

Reply via email to