)]}'
{
  "commit": "12466163cf29699fefc69fb90da1ce8e573b20d5",
  "tree": "9643574fcc32e8c91d3c3c56b2058debf17b65f2",
  "parents": [
    "1a8b1dfd94df6f28729aca0565343c0a9f6906ee"
  ],
  "author": {
    "name": "Hangyu Hua",
    "email": "hbh25y@gmail.com",
    "time": "Mon Jun 03 15:13:03 2024 +0800"
  },
  "committer": {
    "name": "Oleksandr Tymoshenko",
    "email": "ovt@google.com",
    "time": "Tue Jul 02 08:45:40 2024 +0000"
  },
  "message": "net: sched: sch_multiq: fix possible OOB write in multiq_tune()\n\n[ Upstream commit affc18fdc694190ca7575b9a86632a73b9fe043d ]\n\nq-\u003ebands will be assigned to qopt-\u003ebands to execute subsequent code logic\nafter kmalloc. So the old q-\u003ebands should not be used in kmalloc.\nOtherwise, an out-of-bounds write will occur.\n\nBUG\u003db/349787386\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2024-36978 in the Linux kernel.\n\ncos-patch: security-high\nFixes: c2999f7fb05b (\"net: sched: multiq: don\u0027t call qdisc_put() while holding tree lock\")\nSigned-off-by: Hangyu Hua \u003chbh25y@gmail.com\u003e\nAcked-by: Cong Wang \u003ccong.wang@bytedance.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nChange-Id: Ia3e5545208c7dfd4fa85c0de6691cfbc35a18007\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/75479\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Arnav Kansal \u003crnv@google.com\u003e\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "75c9c860182b406e06e747455b1b7084fbab415d",
      "old_mode": 33188,
      "old_path": "net/sched/sch_multiq.c",
      "new_id": "0d6649d937c9faae3cf74ed612730c4dd748239e",
      "new_mode": 33188,
      "new_path": "net/sched/sch_multiq.c"
    }
  ]
}