diff options
| author | Dan Carpenter <[email protected]> | 2025-09-23 11:19:11 +0000 |
|---|---|---|
| committer | Paolo Abeni <[email protected]> | 2025-09-25 09:04:34 +0000 |
| commit | d9c70e93ec5988ab07ad2a92d9f9d12867f02c56 (patch) | |
| tree | f13a150e7a8c504398dc442f85f38bbaf2e25ce2 /drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | |
| parent | Merge branch 'lantiq_gswip-fixes' (diff) | |
| download | kernel-d9c70e93ec5988ab07ad2a92d9f9d12867f02c56.tar.gz kernel-d9c70e93ec5988ab07ad2a92d9f9d12867f02c56.zip | |
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node"
and then dereferences it on the next line. Two lines later, we take
a mutex so I don't think this is an RCU safe region. Re-order it to do
the dereferences before queuing up the free.
Fixes: 68fbff68dbea ("octeontx2-pf: Add police action for TC flower")
Signed-off-by: Dan Carpenter <[email protected]>
Reviewed-by: Vadim Fedorenko <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Paolo Abeni <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c')
0 files changed, 0 insertions, 0 deletions