tree 2109d8fd8a31a8f77078d4677581fd31fa06b6c9
parent 9feb860600a7072818b60181498dc03424c990bc
author Jakub Kicinski <kuba@kernel.org> 1707268700 -0800
committer COS Cherry Picker <cloud-image-release@prod.google.com> 1711055284 -0700

tls: fix race between tx work scheduling and socket close

[ Upstream commit e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb ]

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

BUG=b/326486141
TEST=presubmit
RELEASE_NOTE=Fixed CVE-2024-26585 in the Linux kernel.

cos-patch: security-high
Reported-by: valis <sec@valis.email>
Fixes: a42055e8d2c3 ("net/tls: Add support for async encryption of records for performance")
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Reviewed-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
(cherry picked from commit 6db22d6c7a6dc914b12c0469b94eb639b6a8a146)
Signed-off-by: Robert Kolchmeyer <rkolchmeyer@google.com>
Change-Id: Ia2d6c4605c4b3a7c88e669e5fdc7aea10cf857aa
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/67070
Reviewed-by: Oleksandr Tymoshenko <ovt@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>