Unverified Commit 13fa8905 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12733 CVE-2024-50059 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yongqiang Liu <liuyongqiang13@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ETRANUP2RLX3CXT7A4SPVZQDSQYXYJ7S/ 
Kaixin Wang (1):
  ntb: ntb_hw_switchtec: Fix use after free vulnerability in
    switchtec_ntb_remove due to race condition


-- 
2.25.1
 
https://gitee.com/src-openeuler/kernel/issues/IAYRF0 
 
Link:https://gitee.com/openeuler/kernel/pulls/12733

 

Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
parents 6b05b3ef b909a3e1

drivers/ntb/hw/mscc/ntb_hw_switchtec.c

+1 −0
Original line number Diff line number Diff line
@@ -1558,6 +1558,7 @@ static void switchtec_ntb_remove(struct device *dev, 
	switchtec_ntb_deinit_db_msg_irq(sndev);

	switchtec_ntb_deinit_shared_mw(sndev);

	switchtec_ntb_deinit_crosslink(sndev);

	cancel_work_sync(&sndev->check_link_status_work);

	kfree(sndev);

	dev_info(dev, "ntb device unregistered\n");

}