Messages in this thread | ![/](/images/icornerl.gif) | | Subject | Re: [PATCH] [v3] qed: Fix a potential use-after-free in qed_cxt_tables_alloc | From | patchwork-bot+netdevbpf@kernel ... | Date | Tue, 12 Dec 2023 21:40:23 +0000 |
| |
Hello:
This patch was applied to netdev/net.git (main) by Jakub Kicinski <kuba@kernel.org>:
On Sun, 10 Dec 2023 12:52:55 +0800 you wrote: > qed_ilt_shadow_alloc() will call qed_ilt_shadow_free() to > free p_hwfn->p_cxt_mngr->ilt_shadow on error. However, > qed_cxt_tables_alloc() accesses the freed pointer on failure > of qed_ilt_shadow_alloc() through calling qed_cxt_mngr_free(), > which may lead to use-after-free. Fix this issue by setting > p_mngr->ilt_shadow to NULL in qed_ilt_shadow_free(). > > [...]
Here is the summary with links: - [v3] qed: Fix a potential use-after-free in qed_cxt_tables_alloc https://git.kernel.org/netdev/net/c/b65d52ac9c08
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| ![\](/images/icornerr.gif) |