Re: [PATCH v3] kobject: fix uevent socket use-after-free on net namespace delete
From: Greg KH
Date: Fri Sep 18 2026 - 04:29:28 EST
On Fri, Sep 18, 2026 at 11:38:26AM +0530, Adarsh Das wrote:
> @@ -804,14 +810,19 @@ static int uevent_net_init(struct net *net)
>
> static void uevent_net_exit(struct net *net)
> {
> - struct uevent_sock *ue_sk = net->uevent_sock;
> + struct uevent_sock *ue_sk;
>
> - if (sock_net(ue_sk->sk)->user_ns == &init_user_ns) {
> - mutex_lock(&uevent_sock_mutex);
> - list_del(&ue_sk->list);
> - mutex_unlock(&uevent_sock_mutex);
> + {
> + guard(mutex)(&uevent_sock_mutex);
LLMs don't know how to use these correctly, shouldn't this just be a
scoped_guard()? No extra {} like that please, it's not normal kernel
coding style at all.
thanks,
greg k-h