Re: [PATCH net v2] net/sched: fix use-after-free in __tcf_action_put()

From: patchwork-bot+netdevbpf

Date: Thu Oct 15 2026 - 07:17:25 EST


Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Thu, 8 Oct 2026 18:13:49 +0000 you wrote:
> __tcf_action_put() decrements the reference count before decrementing the
> binding count. Another thread can free the action between these operations,
> causing the binding-count update to access freed memory. KASAN reports it
> as:
>
> BUG: KASAN: slab-use-after-free in __tcf_action_put+0x327/0x340
> Write of size 4 at addr ff11000000d46420 by task tc-put-pause/64
>
> [...]

Here is the summary with links:
- [net,v2] net/sched: fix use-after-free in __tcf_action_put()
https://git.kernel.org/netdev/net/c/7b16eb911091

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html