diff options
| author | Juergen Gross <[email protected]> | 2022-12-06 07:54:24 +0000 |
|---|---|---|
| committer | Juergen Gross <[email protected]> | 2022-12-06 15:00:33 +0000 |
| commit | 74e7e1efdad45580cc3839f2a155174cf158f9b5 (patch) | |
| tree | 1100c46e8284b318acc575598e9ab91560d895dd /net/tipc/node.c | |
| parent | xen/netback: Ensure protocol headers don't fall in the non-linear area (diff) | |
| download | kernel-74e7e1efdad45580cc3839f2a155174cf158f9b5.tar.gz kernel-74e7e1efdad45580cc3839f2a155174cf158f9b5.zip | |
xen/netback: don't call kfree_skb() with interrupts disabled
It is not allowed to call kfree_skb() from hardware interrupt
context or with interrupts being disabled. So remove kfree_skb()
from the spin_lock_irqsave() section and use the already existing
"drop" label in xenvif_start_xmit() for dropping the SKB. At the
same time replace the dev_kfree_skb() call there with a call of
dev_kfree_skb_any(), as xenvif_start_xmit() can be called with
disabled interrupts.
This is XSA-424 / CVE-2022-42328 / CVE-2022-42329.
Fixes: be81992f9086 ("xen/netback: don't queue unlimited number of packages")
Reported-by: Yang Yingliang <[email protected]>
Signed-off-by: Juergen Gross <[email protected]>
Reviewed-by: Jan Beulich <[email protected]>
Signed-off-by: Juergen Gross <[email protected]>
Diffstat (limited to 'net/tipc/node.c')
0 files changed, 0 insertions, 0 deletions
