[Bridge] [syzbot] [bridge?] [coreteam?] KASAN: vmalloc-out-of-bounds Read in __ebt_unregister_table

2023-02-21 Thread syzbot
Hello, syzbot found the following issue on: HEAD commit:3ac88fa4605e Merge tag 'net-6.2-final' of git://git.kernel.. git tree: upstream console+strace: https://syzkaller.appspot.com/x/log.txt?x=12986e58c8 kernel config: https://syzkaller.appspot.com/x/.config?x=fe56f7d193926860

[Bridge] [PATCH] net-bridge: fix unsafe dereference of potential null ptr in __vlan_del()

2023-02-21 Thread Alexander Sapozhnikov
Found by Linux Verification Center (linuxtesting.org) with SVACE. Signed-off-by: Alexander Sapozhnikov --- net/bridge/br_vlan.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/net/bridge/br_vlan.c b/net/bridge/br_vlan.c index bc75fa1e4666..87091e270adf 100644 ---

Re: [Bridge] [PATCH] net-bridge: fix unsafe dereference of potential null ptr in __vlan_del()

2023-02-21 Thread Alexander Lobakin
From: Alexander Sapozhnikov Date: Fri, 17 Feb 2023 16:16:57 +0300 > [PATCH] net-bridge: fix unsafe dereference of potential null ptr in > __vlan_del() Must be: [PATCH net] net: bridge: fix unsafe dereference of potential null ptr in __vlan_del() > After having been compared to NULL value at

[Bridge] [PATCH] net-bridge: fix unsafe dereference of potential null ptr in __vlan_del()

2023-02-21 Thread Alexander Sapozhnikov
After having been compared to NULL value at br_vlan.c:399, pointer 'p' is passed as 1st parameter in call to function 'nbp_vlan_set_vlan_dev_state' at br_vlan.c:420, where it is dereferenced at br_vlan.c:1722. Found by Linux Verification Center (linuxtesting.org) with SVACE. Signed-off-by: