]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7887c6b) | patch
ravb: Fix potential use-after-free in ravb_rx_gbeth()
authorYueHaibing <yuehaibing@huawei.com>
Sat, 3 Dec 2022 09:29:41 +0000 (17:29 +0800)
committerPaolo Abeni <pabeni@redhat.com>
Tue, 6 Dec 2022 11:37:25 +0000 (12:37 +0100)
commit6d263f1739487451a85696120f068223c64a05ee
treec88407590067e0177c2d62aa225eaf1460b6af0etree | snapshot
parent7887c6bd33a6f891fb09da9f29d3e83559dface3commit | diff
ravb: Fix potential use-after-free in ravb_rx_gbeth()

The skb is delivered to napi_gro_receive() which may free it, after calling this,
dereferencing skb may trigger use-after-free.

Fixes: 7c5d12dca894 ("ravb: Fillup ravb_rx_gbeth() stub")
Signed-off-by: YueHaibing <yuehaibing@huawei.com>
Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be>
Link: https://lore.kernel.org/r/20221203092941.10880-1-yuehaibing@huawei.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
drivers/net/ethernet/renesas/ravb_main.c diff | blob | history
Linux Kernel Source Tree.