]> git.baikalelectronics.ru Git - kernel.git/commit
ipmi: fix use after free in _ipmi_destroy_user()
authorDan Carpenter <error27@gmail.com>
Tue, 15 Nov 2022 13:17:43 +0000 (16:17 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 7 Jan 2023 10:11:52 +0000 (11:11 +0100)
commit3b77d9eb97d1b13d6ff3bef1286f86e0fbb6d48f
tree1fae7b4066876dfc625613313989a238b8bc7a8c
parent2abb221b4acc1d91e1915884d298bfb80146cf56
ipmi: fix use after free in _ipmi_destroy_user()

commit a92ce570c81dc0feaeb12a429b4bc65686d17967 upstream.

The intf_free() function frees the "intf" pointer so we cannot
dereference it again on the next line.

Fixes: 3ceed4928e75 ("ipmi: Don't allow device module unload when in use")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Message-Id: <Y3M8xa1drZv4CToE@kili>
Cc: <stable@vger.kernel.org> # 5.5+
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/char/ipmi/ipmi_msghandler.c