Commit c3ff672c authored by Dan Carpenter's avatar Dan Carpenter Committed by zhaoxiaoqiang11
Browse files

ipmi: fix use after free in _ipmi_destroy_user()

stable inclusion
from stable-v5.10.163
commit f29d127b372e1b7662397d92341d9f7de198ff99
category: bugfix
bugzilla: https://gitee.com/openeuler/kernel/issues/I7PJ9N

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f29d127b372e1b7662397d92341d9f7de198ff99



----------------------------------------------------

commit a92ce570 upstream.

The intf_free() function frees the "intf" pointer so we cannot
dereference it again on the next line.

Fixes: cbb79863 ("ipmi: Don't allow device module unload when in use")
Signed-off-by: default avatarDan Carpenter <error27@gmail.com>
Message-Id: <Y3M8xa1drZv4CToE@kili>
Cc: <stable@vger.kernel.org> # 5.5+
Signed-off-by: default avatarCorey Minyard <cminyard@mvista.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarzhaoxiaoqiang11 <zhaoxiaoqiang11@jd.com>
parent 6caf4d41
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment