Re: [PATCH net v2] ipconfig: fix use-after-free of device list after ic_close_devs()

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Sat, 10 Oct 2026 16:49:58 +0800 you wrote:
> ic_close_devs() kfree()s every ic_device node but leaves the static
> ic_first_dev and ic_dev pointers dangling behind.  When a DHCP
> negotiation gets an OFFER but never the matching ACK, ic_bootp_recv()
> accepts the OFFER and records ic_dev = <list node>, the round times
> out and ic_close_devs() frees the whole list — node included.  The
> next failed retry round runs ic_close_devs() once more, evaluating
> 
> [...]

Here is the summary with links:
  - [net,v2] ipconfig: fix use-after-free of device list after ic_close_devs()
    https://git.kernel.org/netdev/net-next/c/befe96ed37d5

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html