)]}'
{
  "commit": "acc8a4a96d4e8b33bf29ce61c12513b705ed310b",
  "tree": "ec8c0a4ea137ab2a5dc316d63044a4c2aa520675",
  "parents": [
    "ef0d3334ca2448558cea31de5a86eecf33b8e175"
  ],
  "author": {
    "name": "Herbert Xu",
    "email": "herbert@gondor.apana.org.au",
    "time": "Thu Aug 04 18:03:46 2022 +0800"
  },
  "committer": {
    "name": "Anil Altinay",
    "email": "aaltinay@google.com",
    "time": "Wed Sep 14 22:10:42 2022 +0000"
  },
  "message": "af_key: Do not call xfrm_probe_algs in parallel\n\n[ Upstream commit ba953a9d89a00c078b85f4b190bc1dde66fe16b5 ]\n\nWhen namespace support was added to xfrm/afkey, it caused the\npreviously single-threaded call to xfrm_probe_algs to become\nmulti-threaded.  This is buggy and needs to be fixed with a mutex.\n\nBUG\u003db/245720223\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2022-3028 in the Linux kernel.\n\ncos-patch: security-high\nReported-by: Abhishek Shah \u003cabhishek.shah@columbia.edu\u003e\nFixes: 283bc9f35bbb (\"xfrm: Namespacify xfrm state/policy locks\")\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\nSigned-off-by: Sasha Levin \u003csashal@kernel.org\u003e\nChange-Id: Id852aece0b73fb8cee79d0e910c6fdd90cba5f31\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/36939\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Robert Kolchmeyer \u003crkolchmeyer@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "32fe99cd01fc859409656d1f6d0127dc64c30644",
      "old_mode": 33188,
      "old_path": "net/key/af_key.c",
      "new_id": "c06cc48c68c9009dcceb7a10e1d7f4abfa71f9c3",
      "new_mode": 33188,
      "new_path": "net/key/af_key.c"
    }
  ]
}