Johan Hovold 1fb673245b ieee802154: atusb: fix use-after-free at disconnect ... commit 7fd25e6fc035f4b04b75bca6d7e8daa069603a76 upstream. The disconnect callback was accessing the hardware-descriptor private data after having having freed it. Fixes: 7490b008d1 ("ieee802154: add support for atusb transceiver") Cc: stable <stable@vger.kernel.org> # 4.2 Cc: Alexander Aring <alex.aring@gmail.com> Reported-by: syzbot+f4509a9138a1472e7e80@syzkaller.appspotmail.com Signed-off-by: Johan Hovold <johan@kernel.org> Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-10-17 13:40:54 -07:00
..
appletalk	net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT	2018-09-29 03:08:52 -07:00
arcnet	arcnet: provide a buffer big enough to actually receive packets	2019-10-05 12:27:41 +02:00
bonding	bonding: Force slave speed check after link state recovery for 802.3ad	2019-09-06 10:18:05 +02:00
caif	caif-hsi: fix possible deadlock in cfhsi_exit_module()	2019-08-04 09:34:54 +02:00
can	can: mcp251x: mcp251x_hw_reset(): allow more time after a reset	2019-10-17 13:40:53 -07:00
cris
dsa	net: dsa: mv88e6xxx: Fix u64 statistics	2019-03-23 08:44:23 +01:00
ethernet	net: qlogic: Fix memory leak in ql_alloc_large_buffers	2019-10-07 21:01:05 +02:00
fddi
fjes	fjes: Fix wrong netdevice feature flags	2017-12-20 10:04:55 +01:00
hamradio	net: hamradio: use eth_broadcast_addr	2018-08-24 13:26:55 +02:00
hippi	hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close	2018-02-25 11:03:42 +01:00
hyperv	hv_netvsc: use skb_get_hash() instead of a homegrown implementation	2017-03-26 12:13:18 +02:00
ieee802154	ieee802154: atusb: fix use-after-free at disconnect	2019-10-17 13:40:54 -07:00
ipvlan	ipvlan: disallow userns cap_net_admin to change global mode/flags	2019-03-23 08:44:31 +01:00
irda	irda: fix overly long udelay()	2018-06-06 16:46:21 +02:00
phy	net/phy: fix DP83865 10 Mbps HDX loopback disable function	2019-10-05 12:27:41 +02:00
plip
ppp	compat_ioctl: pppoe: fix PPPOEIOCSFWD handling	2019-08-11 12:20:46 +02:00
slip	slip: make slhc_free() silently accept an error pointer	2019-05-16 19:44:51 +02:00
team	team: Always enable vlan tx offload	2019-07-10 09:56:37 +02:00
usb	hso: fix NULL-deref on tty open	2019-10-07 21:01:04 +02:00
vmxnet3	vmxnet3: ensure that adapter is in proper state during force_close	2018-04-13 19:50:04 +02:00
wan	drivers: net: lmc: fix case value for target abort error	2018-09-05 09:18:36 +02:00
wimax	wimax/i2400m: fix a memory leak bug	2019-09-10 10:29:47 +01:00
wireless	libertas: Add missing sentinel at end of if_usb.c fw_table	2019-10-05 12:27:50 +02:00
xen-netback	xen/netback: Reset nr_frags before freeing skb	2019-08-25 10:53:05 +02:00
dummy.c
eql.c
geneve.c	geneve: avoid use-after-free of skb->data	2016-12-10 19:07:24 +01:00
ifb.c
Kconfig	vmxnet3: prevent building with 64K pages	2018-02-25 11:03:42 +01:00
LICENSE.SRC
loopback.c	net: introduce device min_header_len	2017-02-18 16:39:27 +01:00
macvlan.c	macvlan: Only deliver one copy of the frame to the macvlan interface	2017-12-20 10:05:01 +01:00
macvtap.c	tun/tap: sanitize TUNSETSNDBUF input	2017-11-18 11:11:05 +01:00
Makefile
mdio.c
mii.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c	rapidio/rionet: do not free skb before reading its length	2018-12-13 09:21:26 +01:00
sb1000.c
Space.c
sungem_phy.c
tun.c	tun: fix use-after-free when register netdev failed	2019-09-21 07:12:41 +02:00
veth.c	veth: set peer GSO values	2018-03-22 09:23:29 +01:00
virtio_net.c	virtio-net: Fix operstate for virtio when no VIRTIO_NET_F_STATUS	2018-05-30 07:49:11 +02:00
vrf.c	vrf: Fix use after free and double free in vrf_finish_output	2018-04-13 19:50:27 +02:00
vxlan.c	vxlan: Don't call gro_cells_destroy() before device is unregistered	2019-04-03 06:23:25 +02:00
xen-netfront.c	xen-netfront: do not use ~0U as error return value for xennet_fill_frags()	2019-10-07 21:01:06 +02:00