hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

V4bel-theori · yifei-aws · commit 6609228c127b · 2025-05-16T19:58:42.000Z
commit e629295 upstream. When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a dangling pointer. This issue is resolved by initializing vsk->trans to NULL. Signed-off-by: Hyunwoo Kim <v4bel@theori.io> Reviewed-by: Stefano Garzarella <sgarzare@redhat.com> Acked-by: Michael S. Tsirkin <mst@redhat.com> Link: https://patch.msgid.link/Zys4hCj61V+mQfX2@v4bel-B760M-AORUS-ELITE-AX Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> [ Clean cherry-pick ] Signed-off-by: Stanislav Uschakow <suschako@amazon.de>
diff --git a/net/vmw_vsock/hyperv_transport.c b/net/vmw_vsock/hyperv_transport.c
@@ -511,6 +511,7 @@ static void hvs_destruct(struct vsock_sock *vsk)
 		vmbus_hvsock_device_unregister(chan);
 
 	kfree(hvs);
+	vsk->trans = NULL;
 }
 
 static int hvs_dgram_bind(struct vsock_sock *vsk, struct sockaddr_vm *addr)

Original file line number	Diff line number	Diff line change
`@@ -511,6 +511,7 @@ static void hvs_destruct(struct vsock_sock *vsk)`
`511`	`511`	`vmbus_hvsock_device_unregister(chan);`
`512`	`512`
`513`	`513`	`kfree(hvs);`
	`514`	`+ vsk->trans = NULL;`
`514`	`515`	`}`
`515`	`516`
`516`	`517`	`static int hvs_dgram_bind(struct vsock_sock vsk, struct sockaddr_vm addr)`