[lvc-project] [PATCH net v2] rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
patchwork-bot+netdevbpf at kernel.org
patchwork-bot+netdevbpf at kernel.org
Tue Jul 21 22:30:18 MSK 2026
Hello:
This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba at kernel.org>:
On Thu, 9 Jul 2026 16:27:54 +0000 you wrote:
> When booting with the 'ipv6.disable=1' parameter, inet6_addr_lst
> is never initialized because inet6_init() exits before addrconf_init()
> is called to initialize it. An attempt to bind an RDS socket to
> an ipv6 address results in a crash in __ipv6_chk_addr_and_flags()
>
> KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
> RIP: 0010:__ipv6_chk_addr_and_flags+0x1df/0x7e0
> Call Trace:
> <TASK>
> ipv6_chk_addr+0x3b/0x50
> rds_tcp_laddr_check+0x155/0x3b0 [rds_tcp]
> rds_trans_get_preferred+0x15d/0x2d0 [rds]
> ? trace_hardirqs_on+0x2d/0x110
> rds_bind+0x1433/0x1d60 [rds]
> ? rds_remove_bound+0xd50/0xd50 [rds]
> ? aa_af_perm+0x250/0x250
> ? __might_fault+0xde/0x190
> ? __sys_bind+0x1dc/0x210
> __sys_bind+0x1dc/0x210
> ? __ia32_sys_socketpair+0x100/0x100
> ? restore_fpregs_from_fpstate+0x53/0x100
> __x64_sys_bind+0x73/0xb0
> ? syscall_enter_from_user_mode+0x1c/0x50
> do_syscall_64+0x34/0x80
> entry_SYSCALL_64_after_hwframe+0x6e/0xd8
> RIP: 0033:0x7f47f8269ea9
> </TASK>
>
> [...]
Here is the summary with links:
- [net,v2] rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled
https://git.kernel.org/netdev/net/c/9c805e592a29
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
More information about the lvc-project
mailing list