Commit d9b16688 authored Jul 29, 2024 by Hangbin Liu Committed by Ma Wupeng Jul 30, 2024

ipv6: sr: fix incorrect unregister order

stable inclusion
from stable-v6.6.33
commit 6c6b74edc911196e8c56ec000671d9f16ea036f9
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/IAD6H2

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6c6b74edc911196e8c56ec000671d9f16ea036f9



--------------------------------

[ Upstream commit 6e370a771d2985107e82d0f6174381c1acb49c20 ]

Commit 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and
null-ptr-deref") changed the register order in seg6_init(). But the
unregister order in seg6_exit() is not updated.

Fixes: 5559cea2d5aa ("ipv6: sr: fix possible use-after-free and null-ptr-deref")
Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
Reviewed-by: Sabrina Dubroca <sd@queasysnail.net>
Reviewed-by: David Ahern <dsahern@kernel.org>
Link: https://lore.kernel.org/r/20240509131812.1662197-3-liuhangbin@gmail.com


Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Wang Hai <wanghai38@huawei.com>

parent d399382f

net/ipv6/seg6.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -567,6 +567,6 @@ void seg6_exit(void)
		seg6_local_exit();
		seg6_iptunnel_exit();
		#endif
		unregister_pernet_subsys(&ip6_segments_ops);
		genl_unregister_family(&seg6_genl_family);
		unregister_pernet_subsys(&ip6_segments_ops);
		}