ipmi: fix use after free in _ipmi_destroy_user()
stable inclusion from stable-v5.10.163 commit f29d127b372e1b7662397d92341d9f7de198ff99 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/I7PJ9N Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f29d127b372e1b7662397d92341d9f7de198ff99 ---------------------------------------------------- commit a92ce570 upstream. The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line. Fixes: cbb79863 ("ipmi: Don't allow device module unload when in use") Signed-off-by:Dan Carpenter <error27@gmail.com> Message-Id: <Y3M8xa1drZv4CToE@kili> Cc: <stable@vger.kernel.org> # 5.5+ Signed-off-by:
Corey Minyard <cminyard@mvista.com> Signed-off-by:
Greg Kroah-Hartman <gregkh@linuxfoundation.org> Signed-off-by:
zhaoxiaoqiang11 <zhaoxiaoqiang11@jd.com>
Loading
Please sign in to comment