)]}'
{
  "commit": "5e16a190b6fffa67edfa8fbee7f62186572e2bf1",
  "tree": "c5648ced648a02caba8d16f7500e17c0c1726523",
  "parents": [
    "69a4dc1bdd77106e675905e62d935738f80567d2"
  ],
  "author": {
    "name": "Budimir Markovic",
    "email": "markovicbudimir@gmail.com",
    "time": "Thu Aug 07 04:18:11 2025 +0000"
  },
  "committer": {
    "name": "Robert Kolchmeyer",
    "email": "rkolchmeyer@google.com",
    "time": "Tue Aug 26 14:26:10 2025 -0700"
  },
  "message": "vsock: Do not allow binding to VMADDR_PORT_ANY\n\ncommit aba0c94f61ec05315fa7815d21aefa4c87f6a9f4 upstream.\n\nIt is possible for a vsock to autobind to VMADDR_PORT_ANY. This can\ncause a use-after-free when a connection is made to the bound socket.\nThe socket returned by accept() also has port VMADDR_PORT_ANY but is not\non the list of unbound sockets. Binding it will result in an extra\nrefcount decrement similar to the one fixed in fcdd2242c023 (vsock: Keep\nthe binding until socket destruction).\n\nModify the check in __vsock_bind_connectible() to also prevent binding\nto VMADDR_PORT_ANY.\n\nBUG\u003db/439256499\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed KCTF-aba0c94 in the Linux kernel.\n\nFixes: d021c344051a (\"VSOCK: Introduce VM Sockets\")\nReported-by: Budimir Markovic \u003cmarkovicbudimir@gmail.com\u003e\nChange-Id: I845e7aa5cad37d7316e9e04e60a1699ae20fb4d0\nSigned-off-by: Budimir Markovic \u003cmarkovicbudimir@gmail.com\u003e\nReviewed-by: Stefano Garzarella \u003csgarzare@redhat.com\u003e\nLink: https://patch.msgid.link/20250807041811.678-1-markovicbudimir@gmail.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n(cherry picked from commit 32950b1907919be86a7a2697d6f93d57068b3865)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n(cherry picked from commit e283919390742c8510800e9c067f1418e885d72f)\nSigned-off-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/109888\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "a2271da346d3451cd71a3b5305f7fb8e7db9f220",
      "old_mode": 33188,
      "old_path": "net/vmw_vsock/af_vsock.c",
      "new_id": "6f3d241c7da5ea1b61f5966ad38ed48f4718bf9a",
      "new_mode": 33188,
      "new_path": "net/vmw_vsock/af_vsock.c"
    }
  ]
}