diff options
| author | Ziwei Xiao <ziweixiao@google.com> | 2024-06-12 00:16:54 +0000 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2024-06-13 07:37:35 -0700 |
| commit | 6f4d93b78ade0a4c2cafd587f7b429ce95abb02e (patch) | |
| tree | eaf1eeac3b91df556b34ae9d7b61dd8a538be187 /net/unix/af_unix.c | |
| parent | 79f18a41dd056115d685f3b0a419c7cd40055e13 (diff) | |
| download | linux-stable-6f4d93b78ade0a4c2cafd587f7b429ce95abb02e.tar.gz linux-stable-6f4d93b78ade0a4c2cafd587f7b429ce95abb02e.tar.bz2 linux-stable-6f4d93b78ade0a4c2cafd587f7b429ce95abb02e.zip | |
gve: Clear napi->skb before dev_kfree_skb_any()
gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it
is freed with dev_kfree_skb_any(). This can result in a subsequent call
to napi_get_frags returning a dangling pointer.
Fix this by clearing napi->skb before the skb is freed.
Fixes: 9b8dd5e5ea48 ("gve: DQO: Add RX path")
Cc: stable@vger.kernel.org
Reported-by: Shailend Chand <shailend@google.com>
Signed-off-by: Ziwei Xiao <ziweixiao@google.com>
Reviewed-by: Harshitha Ramamurthy <hramamurthy@google.com>
Reviewed-by: Shailend Chand <shailend@google.com>
Reviewed-by: Praveen Kaligineedi <pkaligineedi@google.com>
Link: https://lore.kernel.org/r/20240612001654.923887-1-ziweixiao@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions