Dan CarpenterandGreg Kroah-Hartman 1fc9b20a76 ipmi: fix use after free in _ipmi_destroy_user() ...

commit a92ce570c8 upstream.

The intf_free() function frees the "intf" pointer so we cannot
dereference it again on the next line.

Fixes: cbb79863fc ("ipmi: Don't allow device module unload when in use")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Message-Id: <Y3M8xa1drZv4CToE@kili>
Cc: <stable@vger.kernel.org> # 5.5+
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-01-07 11:11:52 +01:00

..

bt-bmc.c

ipmi: bt: Add ast2600 compatible string

2021-10-07 14:02:45 -05:00

ipmb_dev_int.c

i2c: Make remove callback return void

2022-08-16 12:46:26 +02:00

ipmi_bt_sm.c

…

ipmi_devintf.c

ipmi:devintf: Return a proper error when recv buffer too small

2021-10-05 06:54:16 -05:00

ipmi_dmi.c

…

ipmi_dmi.h

…

ipmi_ipmb.c

Merge tag 'for-linus-6.1-1' of https://github.com/cminyard/linux-ipmi

2022-10-11 10:42:25 -07:00

ipmi_kcs_sm.c

…

ipmi_msghandler.c

ipmi: fix use after free in _ipmi_destroy_user()

2023-01-07 11:11:52 +01:00

ipmi_plat_data.c

ipmi: Handle device properties with software node API

2021-03-10 19:00:02 -06:00

ipmi_plat_data.h

…

ipmi_powernv.c

…

ipmi_poweroff.c

ipmi: Add an intializer for ipmi_recv_msg struct

2022-05-12 10:00:03 -05:00

ipmi_si_hardcode.c

ipmi_si: Join string literals back

2021-04-02 12:53:42 -05:00

ipmi_si_hotmod.c

ipmi_si: Join string literals back

2021-04-02 12:53:42 -05:00

ipmi_si_intf.c

ipmi: fix long wait in unload when IPMI disconnect

2023-01-07 11:11:52 +01:00

ipmi_si_mem_io.c

…

ipmi_si_parisc.c

parisc: Make struct parisc_driver::remove() return void

2021-08-30 10:18:25 +02:00

ipmi_si_pci.c

ipmi_si: Join string literals back

2021-04-02 12:53:42 -05:00

ipmi_si_platform.c

parisc: Make struct parisc_driver::remove() return void

2021-08-30 10:18:25 +02:00

ipmi_si_port_io.c

…

ipmi_si_sm.h

…

ipmi_si.h

parisc: Make struct parisc_driver::remove() return void

2021-08-30 10:18:25 +02:00

ipmi_smic_sm.c

…

ipmi_ssif.c

Merge tag 'for-linus-6.1-1' of https://github.com/cminyard/linux-ipmi

2022-10-11 10:42:25 -07:00

ipmi_watchdog.c

ipmi: Add an intializer for ipmi_recv_msg struct

2022-05-12 10:00:03 -05:00

Kconfig

char: ipmi: modify NPCM KCS configuration

2022-07-18 19:27:57 -05:00

kcs_bmc_aspeed.c

ipmi: kcs: Poll OBF briefly to reduce OBE latency

2022-12-31 13:32:03 +01:00

kcs_bmc_cdev_ipmi.c

ipmi: Add __init/__exit annotations to module init/exit funcs

2022-09-22 10:55:46 -05:00

kcs_bmc_client.h

ipmi: kcs_bmc: Allow clients to control KCS IRQ state

2021-06-21 19:50:28 -05:00

kcs_bmc_device.h

ipmi: kcs_bmc: Allow clients to control KCS IRQ state

2021-06-21 19:50:28 -05:00

kcs_bmc_npcm7xx.c

ipmi: kcs_bmc: Enable IBF on open

2021-06-21 19:50:28 -05:00

kcs_bmc_serio.c

ipmi: Add __init/__exit annotations to module init/exit funcs

2022-09-22 10:55:46 -05:00

kcs_bmc.c

ipmi: kcs_bmc: Enable IBF on open

2021-06-21 19:50:28 -05:00

kcs_bmc.h

ipmi: kcs_bmc: Allow clients to control KCS IRQ state

2021-06-21 19:50:28 -05:00

Makefile

ipmi:ipmb: Add initial support for IPMI over IPMB

2021-10-05 06:54:17 -05:00