can: j1939: j1939_can_recv(): add priv refcounting
j1939_can_recv() can be called in parallel with socket release. In this case sk_release and sk_destruct can be done earlier than j1939_can_recv() is processed. Reported-by:<syzbot+ca172a0ac477ac90f045@syzkaller.appspotmail.com> Reported-by:
<syzbot+07ca5bce8530070a5650@syzkaller.appspotmail.com> Reported-by:
<syzbot+a47537d3964ef6c874e1@syzkaller.appspotmail.com> Fixes: 9d71dd0c ("can: add support of SAE J1939 protocol") Signed-off-by:
Oleksij Rempel <o.rempel@pengutronix.de>
Loading
Please register or sign in to comment