iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/net/ethernet
History
Aleksander Jan Bajkowski 1a2db00a55 net: ethernet: lantiq_etop: fix double free in detach 
[ Upstream commit e1533b6319ab9c3a97dad314dd88b3783bc41b69 ]

The number of the currently released descriptor is never incremented
which results in the same skb being released multiple times.

Fixes: 504d4721ee8e ("MIPS: Lantiq: Add ethernet driver")
Reported-by: Joe Perches <joe@perches.com>
Closes: https://lore.kernel.org/all/fc1bf93d92bb5b2f99c6c62745507cc22f3a7b2d.camel@perches.com/
Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Reviewed-by: Andrew Lunn <andrew@lunn.ch>
Link: https://patch.msgid.link/20240708205826.5176-1-olek2@wp.pl
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-07-18 11:39:37 +02:00
..
3com
3c589_cs: Fix an error handling path in tc589_probe()
2023-05-30 12:42:15 +01:00
8390
net:mcf8390: Use platform_get_irq() to get the interrupt
2022-04-15 14:14:37 +02:00
adaptec
…
aeroflex
ethernet: aeroflex: fix potential skb leak in greth_init_rings()
2022-12-14 11:28:30 +01:00
agere
…
alacritech
…
allwinner
…
alteon
…
altera
net: altera: Fix refcount leak in altera_tse_mdio_create
2022-06-14 16:59:36 +02:00
amazon
…
amd
amd-xgbe: propagate the correct speed and duplex status
2023-12-08 08:43:23 +01:00
apm
drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
2022-11-25 17:40:17 +01:00
apple
net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave()
2023-01-18 11:30:19 +01:00
aquantia
net: remove unneeded break
2024-02-23 08:12:51 +01:00
arc
net: arc: select CRC32
2021-10-20 11:23:03 +02:00
atheros
ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
2024-01-08 11:27:34 +01:00
aurora
…
broadcom
bnx2x: Fix multiple UBSAN array-index-out-of-bounds
2024-07-18 11:39:36 +02:00
brocade
bna: ensure the copied buf is NUL terminated
2024-05-17 11:42:38 +02:00
cadence
net: macb: fix a memory corruption in extended buffer descriptor mode
2023-04-20 12:04:40 +02:00
calxeda
…
cavium
liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
2024-07-05 09:00:24 +02:00
chelsio
net: chelsio: cxgb4: add an error code check in t4_load_phy_fw
2023-11-08 11:22:21 +01:00
cirrus
…
cisco
enic: Validate length of nl attributes in enic_set_vf_port
2024-06-16 13:23:37 +02:00
cortina
net: ethernet: cortina: Locking fixes
2024-06-16 13:23:28 +02:00
davicom
net: davicom: Fix regulator not turned off on failed probe
2021-04-28 13:16:51 +02:00
dec
ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
2022-05-25 09:10:41 +02:00
dlink
…
emulex
benet: fix return value check in be_lancer_xmit_workarounds()
2023-08-11 11:45:31 +02:00
ezchip
net: ethernet: ezchip: fix error handling
2021-07-20 16:15:51 +02:00
faraday
net: ftgmac100: Disable hardware checksum on AST2600
2022-06-06 08:24:20 +02:00
freescale
net:fec: Add fec_enet_deinit()
2024-06-16 13:23:37 +02:00
fujitsu
net: fujitsu: fix potential null-ptr-deref
2021-06-03 08:38:09 +02:00
hisilicon
net: hns: fix fake link up on xge port
2023-12-13 17:42:16 +01:00
hp
…
huawei
…
i825xx
lib82596: Fix IRQ check in sni_82596_probe
2022-01-27 09:04:33 +01:00
ibm
ibmveth: Use dcbf rather than dcbfl
2023-08-30 16:31:54 +02:00
intel
i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
2024-05-02 16:17:12 +02:00
marvell
sky2: Make sure there is at least one frag_addr available
2023-10-25 11:16:58 +02:00
mediatek
net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
2023-09-23 10:48:14 +02:00
mellanox
net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion
2024-06-16 13:23:37 +02:00
micrel
net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
2022-11-03 23:52:32 +09:00
microchip
net: lan743x: Don't sleep in atomic context
2023-08-11 11:45:17 +02:00
moxa
net: moxa: fix UAF in moxart_mac_probe
2021-07-28 11:13:45 +02:00
mscc
net: mscc: ocelot: allow unregistered IP multicast flooding
2022-07-02 16:27:39 +02:00
myricom
myri10ge: Fix an error handling path in myri10ge_probe()
2023-01-18 11:30:33 +01:00
natsemi
net/sonic: use dma_mapping_error() for error check
2023-04-05 11:15:35 +02:00
neterion
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
netronome
nfp: flower: handle acti_netdevs allocation failure
2024-03-26 18:22:37 -04:00
ni
net: nixge: disable napi when enable interrupts failed in nixge_open()
2022-11-25 17:40:17 +01:00
nuvoton
…
nvidia
forcedeth: Fix an error handling path in nv_probe()
2023-05-30 12:42:15 +01:00
nxp
net: ethernet: lpc_eth: Handle error for clk_enable
2022-03-16 13:20:26 +01:00
oki-semi
net: pch_gbe: fix pci device refcount leak while module exiting
2022-12-08 11:18:29 +01:00
packetengines
…
pasemi
net: pasemi: Fix return type of pasemi_mac_start_tx()
2023-05-30 12:42:08 +01:00
qlogic
qed: avoid truncating work queue length
2024-06-16 13:23:25 +02:00
qualcomm
net: qualcomm: rmnet: fix global oob in rmnet_policy
2024-01-25 14:33:38 -08:00
rdc
r6040: Fix kmemleak in probe and remove
2023-01-18 11:30:32 +01:00
realtek
r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
2024-04-13 12:50:12 +02:00
renesas
net: ravb: Fix dma_addr_t truncation in error case
2024-01-25 14:33:38 -08:00
rocker
ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
2022-09-15 12:17:02 +02:00
samsung
net: sxgbe: fix return value of __setup handler
2022-03-08 19:04:08 +01:00
seeq
…
sfc
sfc: fix kernel panic when creating VF
2022-07-21 21:09:29 +02:00
sgi
…
silan
…
sis
sis900: Fix missing pci_disable_device() in probe and remove
2021-08-04 12:23:46 +02:00
smsc
net: smc91x: Fix m68k kernel compilation for ColdFire CPU
2024-06-16 13:23:22 +02:00
socionext
net: netsec: fix error handling in netsec_register_mdio()
2022-11-03 23:52:30 +09:00
stmicro
net: stmmac: fix rx queue priority assignment
2024-04-13 12:50:13 +02:00
sun
treewide: Remove uninitialized_var() usage
2023-08-11 11:45:01 +02:00
synopsys
drivers/net/ethernet: clean up unused assignments
2021-06-03 08:38:12 +02:00
tehuti
net: tehuti: fix error return code in bdx_probe()
2021-03-30 14:36:57 +02:00
ti
net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
2023-08-11 11:45:26 +02:00
toshiba
treewide: Spelling fix in comment
2023-11-08 11:22:15 +01:00
tundra
…
via
drivers/net/ethernet: clean up unused assignments
2021-06-03 08:38:12 +02:00
wiznet
net: w5100: check return value after calling platform_get_resource()
2021-09-22 11:48:09 +02:00
xilinx
net: axienet: Fix check for partial TX checksum
2023-12-08 08:43:23 +01:00
xircom
xirc2ps_cs: Fix use after free bug in xirc2ps_detach
2023-04-05 11:15:34 +02:00
xscale
…
dnet.c
net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave()
2023-01-18 11:30:19 +01:00
dnet.h
…
ec_bhf.c
net: ethernet: fix potential use-after-free in ec_bhf_remove
2021-06-30 08:48:21 -04:00
ethoc.c
…
fealnx.c
…
jme.c
…
jme.h
…
Kconfig
net: korina: select CRC32
2021-10-20 11:23:03 +02:00
korina.c
…
lantiq_etop.c
net: ethernet: lantiq_etop: fix double free in detach
2024-07-18 11:39:37 +02:00
Makefile
…
netx-eth.c
…