On Mon, Dec 12, 2022 at 11:15:58AM +0100, Oliver Hartkopp wrote:
Just FYI
The longterm kernels before Linux 5.4 (4.9/4.14/4.19) are not affected by this issue as the netdev->ml_priv pointer is assigned within a netdev notifier for ARPHRD_CAN interfaces and this always assigns the data structure properly.
I tested the crash reproducer from the syzbot bug report which did not have any bad effect (as expected).
Wonderful, thanks for letting us know.
greg k-h