]> git.proxmox.com Git - mirror_ubuntu-focal-kernel.git/commit
net: ethernet: ezchip: fix UAF in nps_enet_remove
authorPavel Skripkin <paskripkin@gmail.com>
Fri, 18 Jun 2021 16:14:31 +0000 (19:14 +0300)
committerStefan Bader <stefan.bader@canonical.com>
Fri, 13 Aug 2021 07:45:46 +0000 (09:45 +0200)
commit847140d6cd4d2091e11a65d1d7158333412ec909
treed5d016f9038cf854dd40e2ae9d80dce28241d9a4
parentc278acb92c12aae44983ef2be4f337b718ce9ce7
net: ethernet: ezchip: fix UAF in nps_enet_remove

BugLink: https://bugs.launchpad.net/bugs/1938199
[ Upstream commit e4b8700e07a86e8eab6916aa5c5ba99042c34089 ]

priv is netdev private data, but it is used
after free_netdev(). It can cause use-after-free when accessing priv
pointer. So, fix it by moving free_netdev() after netif_napi_del()
call.

Fixes: 0dd077093636 ("NET: Add ezchip ethernet driver")
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
drivers/net/ethernet/ezchip/nps_enet.c