Théo LebrunandPaolo Abeni 27f575836c net: macb: drop in-flight Tx SKBs on close ...

The MACB driver has since forever leaked the outgoing SKBs that
have not yet been marked as completed. They live in queue->tx_skb
which gets freed without remorse nor checking.

macb_free_consistent() gets called in a few codepaths, but only close will
trigger the added expressions. In macb_open() and macb_alloc_consistent()
failure cases, queues' tx_skb just got allocated and are empty.

Fixes: 89e5785fc8 ("[PATCH] Atmel MACB ethernet driver")
Cc: stable@vger.kernel.org
Reviewed-by: Nicolai Buchwitz <nb@tipi-net.de>
Signed-off-by: Théo Lebrun <theo.lebrun@bootlin.com>
Link: https://patch.msgid.link/20260702-macb-drop-tx-v4-1-1c833eebdbc8@bootlin.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>

2026-07-09 10:48:15 +02:00

..

Kconfig

…

macb_main.c

net: macb: drop in-flight Tx SKBs on close

2026-07-09 10:48:15 +02:00

macb_pci.c

net: macb: properly unregister fixed rate clocks

2026-04-01 19:57:20 -07:00

macb_ptp.c

net: macb: fix use-after-free access to PTP clock

2026-03-18 17:18:47 -07:00

macb.h

net: macb: Introduce macb_queue_isr_clear() helper function

2026-04-03 15:51:04 -07:00

Makefile

…