)]}'
{
  "commit": "66208798dd21d4ee2d28f8ea8b9b3a2df63e3f42",
  "tree": "fecd24f02bb16773d6e886062575b89fc39c73b7",
  "parents": [
    "934359bdc0f1081eed66a6db8dba3ea7c2948d3c"
  ],
  "author": {
    "name": "Xiang Mei",
    "email": "xmei5@asu.edu",
    "time": "Thu Jul 10 03:09:42 2025 -0700"
  },
  "committer": {
    "name": "Cloud Image Release",
    "email": "cloud-image-release@prod.google.com",
    "time": "Tue Jul 22 14:00:05 2025 -0700"
  },
  "message": "net/sched: sch_qfq: Fix race condition on qfq_aggregate\n\n[Upstream commit 5e28d5a3f774f118896aec17a3a20a9c5c9dfc64]\n\nA race condition can occur when \u0027agg\u0027 is modified in qfq_change_agg\n(called during qfq_enqueue) while other threads access it\nconcurrently. For example, qfq_dump_class may trigger a NULL\ndereference, and qfq_delete_class may cause a use-after-free.\n\nThis patch addresses the issue by:\n\n1. Moved qfq_destroy_class into the critical section.\n\n2. Added sch_tree_lock protection to qfq_dump_class and\nqfq_dump_class_stats.\n\nBUG\u003db/433107272\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dNone\n\nFixes: 462dbc9101ac (\"pkt_sched: QFQ Plus: fair-queueing service at DRR cost\")\nSigned-off-by: Xiang Mei \u003cxmei5@asu.edu\u003e\nReviewed-by: Cong Wang \u003cxiyou.wangcong@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\ncos-patch: security-high\nChange-Id: Ibfb7bbdd70d2d5c358da50c67492c6c29d5fb67c\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/107381\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\nMain-Branch-Verified: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/107402\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6462468bf77c72112b686a1bda1e77abca77a741",
      "old_mode": 33188,
      "old_path": "net/sched/sch_qfq.c",
      "new_id": "f2692c9173f79c04f410b2e70c6f4626ff6b789b",
      "new_mode": 33188,
      "new_path": "net/sched/sch_qfq.c"
    }
  ]
}