Skip to content
  1. Nov 28, 2022
    • Zhang Changzhong's avatar
      net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe() · 46fb6512
      Zhang Changzhong authored
      The am65_cpsw_nuss_cleanup_ndev() function calls unregister_netdev()
      even if register_netdev() fails, which triggers WARN_ON(1) in
      unregister_netdevice_many(). To fix it, make sure that
      unregister_netdev() is called only on registered netdev.
      
      Compile tested only.
      
      Fixes: 84b4aa49
      
       ("net: ethernet: ti: am65-cpsw: add multi port support in mac-only mode")
      Signed-off-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
      Reviewed-by: default avatarMaciej Fijalkowski <maciej.fijalkowski@intel.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      46fb6512
    • David S. Miller's avatar
      Merge tag 'mlx5-fixes-2022-11-24' of git://git.kernel.org/pub/scm/linux/kernel/git/saeed/linux · 763465e6
      David S. Miller authored
      
      
      Saeed Mahameed says:
      
      ====================
      mlx5-fixes-2022-11-24
      This series provides bug fixes to mlx5 driver.
      
      Focusing on error handling and proper memory management in mlx5, in
      general and in the newly added macsec module.
      
      I still have few fixes left in my queue and I hope those will be the
      last ones for mlx5 for this cycle.
      
      Please pull and let me know if there is any problem.
      
      Happy thanksgiving.
      ====================
      
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      763465e6
    • David S. Miller's avatar
      Merge branch '10GbE' of git://git.kernel.org/pub/scm/linux/kernel/git/tnguy/net-queue · 1f605d6d
      David S. Miller authored
      
      
      Tony Nguyen says:
      
      ====================
      Intel Wired LAN Driver Updates 2022-11-23 (ixgbevf, i40e, fm10k, iavf, e100)
      
      This series contains updates to various Intel drivers.
      
      Shang XiaoJing fixes init module error path stop to resource leaks for
      ixgbevf and i40e.
      
      Yuan Can also does the same for fm10k and iavf.
      
      Wang Hai stops freeing of skb as it was causing use after free error for
      e100.
      ====================
      
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      1f605d6d
    • Yang Yingliang's avatar
      net: phy: fix null-ptr-deref while probe() failed · 369eb2c9
      Yang Yingliang authored
      I got a null-ptr-deref report as following when doing fault injection test:
      
      BUG: kernel NULL pointer dereference, address: 0000000000000058
      Oops: 0000 [#1] PREEMPT SMP KASAN PTI
      CPU: 1 PID: 253 Comm: 507-spi-dm9051 Tainted: G    B            N 6.1.0-rc3+
      Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014
      RIP: 0010:klist_put+0x2d/0xd0
      Call Trace:
       <TASK>
       klist_remove+0xf1/0x1c0
       device_release_driver_internal+0x23e/0x2d0
       bus_remove_device+0x1bd/0x240
       device_del+0x357/0x770
       phy_device_remove+0x11/0x30
       mdiobus_unregister+0xa5/0x140
       release_nodes+0x6a/0xa0
       devres_release_all+0xf8/0x150
       device_unbind_cleanup+0x19/0xd0
      
      //probe path:
      phy_device_register()
        device_add()
      
      phy_connect
        phy_attach_direct() //set device driver
          probe() //it's failed, driver is not bound
          device_bind_driver() // probe failed, it's not called
      
      //remove path:
      phy_device_remove()
        device_del()
          device_release_driver_internal()
            __device_release_driver() //dev->drv is not NULL
              klist_remove() <- knode_driver is not added yet, cause null-ptr-deref
      
      In phy_attach_direct(), after setting the 'dev->driver', probe() fails,
      device_bind_driver() is not called, so the knode_driver->n_klist is not
      set, then it causes null-ptr-deref in __device_release_driver() while
      deleting device. Fix this by setting dev->driver to NULL in the error
      path in phy_attach_direct().
      
      Fixes: e1393456
      
       ("[PATCH] PHY Layer fixup")
      Signed-off-by: default avatarYang Yingliang <yangyingliang@huawei.com>
      Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
      369eb2c9
  2. Nov 25, 2022
  3. Nov 24, 2022