Unverified Commit 598aeb64 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!12729 CVE-2024-50059 

Merge Pull Request from: @ci-robot 
 
PR sync from: Yongqiang Liu <liuyongqiang13@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/PBJOAYHTUTCTPKCCQTGLZGDC7W4EBKMM/ 
Kaixin Wang (1):
  ntb: ntb_hw_switchtec: Fix use after free vulnerability in
    switchtec_ntb_remove due to race condition


-- 
2.25.1
 
https://gitee.com/src-openeuler/kernel/issues/IAYRF0 
 
Link:https://gitee.com/openeuler/kernel/pulls/12729

 

Reviewed-by: default avatarWeilong Chen <chenweilong@huawei.com>
Signed-off-by: default avatarZhang Peng <zhangpeng362@huawei.com>
parents 56d5a54e b1aec41c

drivers/ntb/hw/mscc/ntb_hw_switchtec.c

+1 −0
Original line number Diff line number Diff line
@@ -1554,6 +1554,7 @@ static void switchtec_ntb_remove(struct device *dev) 
	switchtec_ntb_deinit_db_msg_irq(sndev);

	switchtec_ntb_deinit_shared_mw(sndev);

	switchtec_ntb_deinit_crosslink(sndev);

	cancel_work_sync(&sndev->check_link_status_work);

	kfree(sndev);

	dev_info(dev, "ntb device unregistered\n");

}