iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/net
History
Liu Jian 3a4eddd1cb net: hisilicon: Fix potential use-after-free in hix5hd2_rx() 
[ Upstream commit 433c07a13f59856e4585e89e86b7d4cc59348fab ]

The skb is delivered to napi_gro_receive() which may free it, after
calling this, dereferencing skb may trigger use-after-free.

Fixes: 57c5bc9ad7d7 ("net: hisilicon: add hix5hd2 mac driver")
Signed-off-by: Liu Jian <liujian56@huawei.com>
Link: https://lore.kernel.org/r/20221203094240.1240211-2-liujian56@huawei.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-12-14 11:28:30 +01:00
..
appletalk
net: appletalk: cops: Fix data race in cops_probe1
2021-06-16 11:54:58 +02:00
arcnet
net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
2022-03-08 19:04:08 +01:00
bonding
bonding: 802.3ad: fix no transmission of LACPDUs
2022-09-05 10:26:29 +02:00
caif
caif_virtio: fix race between virtio_device_ready() and ndo_open()
2022-07-07 17:35:10 +02:00
can
can: cc770: cc770_isa_probe(): add missing free_cc770dev()
2022-12-08 11:18:32 +01:00
dsa
dsa: lan9303: Correct stat name
2022-12-08 11:18:33 +01:00
ethernet
net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
2022-12-14 11:28:30 +01:00
fddi
FDDI: defxx: Make MMIO the configuration default except for EISA
2021-05-22 10:59:47 +02:00
fjes
fjes: Check for error irq
2021-12-29 12:20:45 +01:00
hamradio
hamradio: fix issue of dev reference count leakage in bpq_device_event()
2022-11-25 17:40:17 +01:00
hippi
drivers: net: hippi: Fix deadlock in rr_close()
2022-05-12 12:20:22 +02:00
hyperv
hv_netvsc: Fix race between VF offering and VF association message from host
2022-11-03 23:52:27 +09:00
ieee802154
ca8210: Fix crash by zero initializing data
2022-12-14 11:28:28 +01:00
ipvlan
ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
2022-09-28 11:02:56 +02:00
netdevsim
netdevsim: Avoid allocation warnings triggered from user space
2022-08-25 11:15:12 +02:00
phy
net: phy: fix null-ptr-deref while probe() failed
2022-12-08 11:18:33 +01:00
plip
…
ppp
ppp: ensure minimum packet size in ppp_write()
2022-01-27 09:04:20 +01:00
slip
drivers: net: slip: fix NPD bug in sl_tx_timeout()
2022-04-20 09:12:50 +02:00
team
net: team: Unsync device addresses on ndo_stop
2022-09-28 11:02:56 +02:00
usb
net: usb: qmi_wwan: add u-blox 0x1342 composition
2022-12-14 11:28:26 +01:00
vmxnet3
net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
2022-05-25 09:10:39 +02:00
wan
net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
2022-11-25 17:40:17 +01:00
wimax
staging: wimax/i2400m: fix byte-order issue
2021-05-22 10:59:14 +02:00
wireless
wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
2022-12-08 11:18:28 +01:00
xen-netback
xen/netback: don't call kfree_skb() with interrupts disabled
2022-12-14 11:28:27 +01:00
dummy.c
…
eql.c
…
geneve.c
geneve: do not use RT_TOS for IPv6 flowlabel
2022-08-25 11:15:38 +02:00
gtp.c
net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
2021-03-04 09:39:59 +01:00
ifb.c
…
Kconfig
…
LICENSE.SRC
…
loopback.c
…
macsec.c
net: macsec: Verify that send_sci is on when setting Tx sci explicitly
2022-02-08 18:23:17 +01:00
macvlan.c
macvlan: enforce a consistent minimal mtu
2022-11-25 17:40:28 +01:00
macvtap.c
macvtap: advertise link netns via netlink
2022-04-15 14:15:02 +02:00
Makefile
…
mdio.c
…
mii.c
…
net_failover.c
…
netconsole.c
…
nlmon.c
…
ntb_netdev.c
net: net_netdev: Fix error handling in ntb_netdev_init_module()
2022-12-08 11:18:33 +01:00
rionet.c
…
sb1000.c
…
Space.c
…
sungem_phy.c
net: sungem_phy: Add of_node_put() for reference returned by of_get_parent()
2022-08-11 12:48:39 +02:00
tap.c
…
thunderbolt.c
net: thunderbolt: Fix error handling in tbnet_init()
2022-11-25 17:40:25 +01:00
tun.c
net: tun: Fix use-after-free in tun_detach()
2022-12-08 11:18:33 +01:00
veth.c
veth: Ensure eth header is in skb's linear part
2022-04-20 09:12:48 +02:00
virtio_net.c
virtio-net: fix race between ndo_open() and virtio_device_ready()
2022-07-07 17:35:09 +02:00
vrf.c
vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
2021-12-08 08:50:12 +01:00
vsockmon.c
…
vxlan.c
vxlan: fix error return code in vxlan_fdb_append
2022-04-27 13:39:43 +02:00
xen-netfront.c
xen-netfront: Fix NULL sring after live migration
2022-12-14 11:28:29 +01:00