)]}'
{
  "commit": "0bb535980aa2cd3dbe532dda09c8f75cdf07ef20",
  "tree": "a0c770cad389e768b3a71697400fb8ed078d0053",
  "parents": [
    "f3d65b53d35602dba107732c8ff74246ec37c54c"
  ],
  "author": {
    "name": "Sabrina Dubroca",
    "email": "sd@queasysnail.net",
    "time": "Wed Feb 28 23:43:59 2024 +0100"
  },
  "committer": {
    "name": "Kevin Berry",
    "email": "kpberry@google.com",
    "time": "Thu Sep 04 17:13:03 2025 -0700"
  },
  "message": "tls: separate no-async decryption request handling from async\n\ncommit 41532b785e9d79636b3815a64ddf6a096647d011 upstream.\n\nIf we\u0027re not doing async, the handling is much simpler. There\u0027s no\nreference counting, we just need to wait for the completion to wake us\nup and return its result.\n\nWe should preferably also use a separate crypto_wait. I\u0027m not seeing a\nUAF as I did in the past, I think aec7961916f3 (\"tls: fix race between\nasync notify and socket close\") took care of it.\n\nThis will make the next fix easier.\n\nBUG\u003db/441916256\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2024-58240 in the Linux kernel.\n\ncos-patch: security-moderate\nChange-Id: I2282d5a49c552263e4a7ddab9d2dbc4472c7d9eb\nSigned-off-by: Sabrina Dubroca \u003csd@queasysnail.net\u003e\nLink: https://lore.kernel.org/r/47bde5f649707610eaef9f0d679519966fc31061.1709132643.git.sd@queasysnail.net\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n[ William: The original patch did not apply cleanly due to deletions of\n  non-existent lines in 6.1.y. The UAF the author stopped seeing can still\n  be reproduced on systems without AVX in conjunction with cryptd.\n  Also removed an extraneous statement after a return statement that is\n  adjacent to diff. ]\nLink: https://lore.kernel.org/netdev/he2K1yz_u7bZ-CnYcTSQ4OxuLuHZXN6xZRgp6_ICSWnq8J5FpI_uD1i_1lTSf7WMrYb5ThiX1OR2GTOB2IltgT49Koy7Hhutr4du4KtLvyk\u003d@willsroot.io/\nSigned-off-by: William Liu \u003cwill@willsroot.io\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Kevin Berry \u003ckpberry@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/110622\nReviewed-by: Miri Amarilio \u003cmirilio@google.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5d5f785813afc15c0171e3d30f27b83d2f4f6790",
      "old_mode": 33188,
      "old_path": "net/tls/tls_sw.c",
      "new_id": "9d428ec89ec749978b07e75e664f899c0b899e6c",
      "new_mode": 33188,
      "new_path": "net/tls/tls_sw.c"
    }
  ]
}
