Linux kernel bug fix: net_sched: move the empty tp check from ->destroy() to ->delete()
Subsystem: networking (net/sched/cls_matchall.c)
Bug type: race-condition, severity: security
Keywords: race condition
Files changed: include/net/sch_generic.h;net/sched/cls_api.c;net/sched/cls_basic.c;net/sched/cls_bpf.c;net/sched/cls_cgroup.c;net/sched/cls_flow.c;net/sched/cls_flower.c;net/sched/cls_fw.c;net/sched/cls_matchall.c;net/sched/cls_route.c;net/sched/cls_rsvp.h;net/sched/cls_tcindex.c;net/sched/cls_u32.c
Introduced by Cong Wang on 2015-03-09 15:35:55 -0400; fixed by WANG Cong on 2017-04-21 13:58:15 -0400 (lifetime: 773 days)