Dan Carpenter c41b2941a0 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() ...

[ Upstream commit d9c70e93ec ]

This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node"
and then dereferences it on the next line.  Two lines later, we take
a mutex so I don't think this is an RCU safe region.  Re-order it to do
the dereferences before queuing up the free.

Fixes: 68fbff68db ("octeontx2-pf: Add police action for TC flower")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Vadim Fedorenko <vadim.fedorenko@linux.dev>
Link: https://patch.msgid.link/aNKCL1jKwK8GRJHh@stanley.mountain
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-10-02 13:44:11 +02:00

..

arcnet

…

bonding

bonding: don't set oif to bond dev when getting NS target destination

2025-09-25 11:13:44 +02:00

caif

…

can

can: peak_usb: fix shift-out-of-bounds issue

2025-10-02 13:44:09 +02:00

dsa

net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port

2025-10-02 13:44:11 +02:00

ethernet

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

2025-10-02 13:44:11 +02:00

fddi

…

fjes

…

hamradio

…

hippi

…

hyperv

net: hv_netvsc: fix loss of early receive events from host during channel open.

2025-09-04 15:31:51 +02:00

ieee802154

…

ipa

…

ipvlan

net: fix NULL pointer dereference in l3mdev_l3_rcv

2025-09-09 18:58:21 +02:00

mctp

…

mdio

…

netdevsim

…

pcs

net: pcs: rzn1-miic: Correct MODCTRL register offset

2025-09-09 18:58:19 +02:00

phy

net: sfp: add quirk for FLYPRO copper SFP+ module

2025-10-02 13:44:07 +02:00

plip

…

ppp

ppp: fix memory leak in pad_compress_skb

2025-09-09 18:58:14 +02:00

pse-pd

…

slip

…

team

…

thunderbolt

net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()

2025-08-20 18:30:34 +02:00

usb

Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"

2025-09-19 16:35:48 +02:00

vmxnet3

vmxnet3: unregister xdp rxq info in the reset path

2025-09-25 11:13:49 +02:00

vxlan

vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects

2025-09-09 18:58:12 +02:00

wan

…

wireguard

…

wireless

wifi: virt_wifi: Fix page fault on connect

2025-10-02 13:44:08 +02:00

wwan

…

xen-netback

…

amt.c

…

bareudp.c

…

dummy.c

…

eql.c

…

geneve.c

…

gtp.c

…

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

macsec: read MACSEC_SA_ATTR_PN with nla_get_uint

2025-09-09 18:58:08 +02:00

macvlan.c

…

macvtap.c

…

Makefile

…

mdio.c

…

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

netkit.c

…

nlmon.c

…

ntb_netdev.c

…

pfcp.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

…

tun.c

net: tun: Update napi->skb after XDP process

2025-10-02 13:44:09 +02:00

veth.c

…

virtio_net.c

…

vrf.c

…

vsockmon.c

…

xen-netfront.c

…