Jiexun Wang 39897df386 af_unix: read UNIX_DIAG_VFS data under unix_state_lock ... Exact UNIX diag lookups hold a reference to the socket, but not to u->path. Meanwhile, unix_release_sock() clears u->path under unix_state_lock() and drops the path reference after unlocking. Read the inode and device numbers for UNIX_DIAG_VFS while holding unix_state_lock(), then emit the netlink attribute after dropping the lock. This keeps the VFS data stable while the reply is being built. Fixes: 5f7b056946 ("unix_diag: Unix inode info NLA") Reported-by: Yifan Wu <yifanwucs@gmail.com> Reported-by: Juefei Pu <tomapufckgml@gmail.com> Co-developed-by: Yuan Tan <yuantan098@gmail.com> Signed-off-by: Yuan Tan <yuantan098@gmail.com> Suggested-by: Xin Liu <bird@lzu.edu.cn> Tested-by: Ren Wei <enjou1224z@gmail.com> Signed-off-by: Jiexun Wang <wangjiexun2025@gmail.com> Signed-off-by: Ren Wei <n05ec@lzu.edu.cn> Reviewed-by: Kuniyuki Iwashima <kuniyu@google.com> Link: https://patch.msgid.link/20260407080015.1744197-1-n05ec@lzu.edu.cn Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2026-04-08 19:33:52 -07:00
..
af_unix.c	af_unix: Give up GC if MSG_PEEK intervened.	2026-03-12 13:37:18 -07:00
af_unix.h	af_unix: Give up GC if MSG_PEEK intervened.	2026-03-12 13:37:18 -07:00
diag.c	af_unix: read UNIX_DIAG_VFS data under unix_state_lock	2026-04-08 19:33:52 -07:00
garbage.c	af_unix: Give up GC if MSG_PEEK intervened.	2026-03-12 13:37:18 -07:00
Kconfig	af_unix: Add a prompt to CONFIG_AF_UNIX_OOB	2024-12-19 19:16:15 -08:00
Makefile	af_unix: Remove CONFIG_UNIX_SCM.	2024-01-31 16:41:16 -08:00
sysctl_net_unix.c	af_unix: Clean up #include under net/unix/.	2025-03-25 04:30:07 -07:00
unix_bpf.c	af_unix: Explicitly include headers for non-pointer struct fields.	2025-03-25 04:30:07 -07:00