)]}'
{
  "commit": "355363a688803f4d36f8cb7f97e7d79db2af352b",
  "tree": "e1e858bbd37f56fd49f67e063f7492ef54e80e8b",
  "parents": [
    "d9edaa5815413c6e7621bd1d2d539228d9c5f91f"
  ],
  "author": {
    "name": "Jozsef Kadlecsik",
    "email": "kadlec@netfilter.org",
    "time": "Tue Sep 19 20:04:45 2023 +0200"
  },
  "committer": {
    "name": "Nandhini Rengaraj",
    "email": "nrengaraj@google.com",
    "time": "Mon Oct 09 18:04:32 2023 +0000"
  },
  "message": "netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP\n\n[ Upstream commit 7433b6d2afd512d04398c73aa984d1e285be125b ]\n\nKyle Zeng reported that there is a race between IPSET_CMD_ADD and IPSET_CMD_SWAP\nin netfilter/ip_set, which can lead to the invocation of `__ip_set_put` on a\nwrong `set`, triggering the `BUG_ON(set-\u003eref \u003d\u003d 0);` check in it.\n\nThe race is caused by using the wrong reference counter, i.e. the ref counter instead\nof ref_netlink.\n\nBUG\u003db/303207618\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFix CVE-2023-42756 in COS kernel.\n\ncos-patch: security-moderate\nFixes: 24e227896bbf (\"netfilter: ipset: Add schedule point in call_ad().\")\nReported-by: Kyle Zeng \u003czengyhkyle@gmail.com\u003e\nCloses: https://lore.kernel.org/netfilter-devel/ZPZqetxOmH+w%2Fmyc@westworld/#r\nTested-by: Kyle Zeng \u003czengyhkyle@gmail.com\u003e\nChange-Id: I257422d17691b18f5609740fa38cd1f74f7a0244\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@netfilter.org\u003e\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nSigned-off-by: Nandhini Rengaraj \u003cnrengaraj@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/58844\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Oleksandr Tymoshenko \u003covt@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "9a6b64779e644ae99df4fbd1c93ae8d9511d3643",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipset/ip_set_core.c",
      "new_id": "20eede37d522813307f46fe2b1e90720bea966ed",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipset/ip_set_core.c"
    }
  ]
}