Linux kernel bug fix: can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership
Subsystem: other (include/linux/can/skb.h)
Bug type: use-after-free, severity: medium
Keywords: refcount;use after free
Files changed: include/linux/can/skb.h
Introduced by Oliver Hartkopp on 2014-01-30 16:25:49 -0800; fixed by Oleksij Rempel on 2021-03-01 11:45:04 +0100 (lifetime: 2586 days)