Johan Hovold 1fb673245b ieee802154: atusb: fix use-after-free at disconnect ... commit 7fd25e6fc035f4b04b75bca6d7e8daa069603a76 upstream. The disconnect callback was accessing the hardware-descriptor private data after having having freed it. Fixes: 7490b008d1 ("ieee802154: add support for atusb transceiver") Cc: stable <stable@vger.kernel.org> # 4.2 Cc: Alexander Aring <alex.aring@gmail.com> Reported-by: syzbot+f4509a9138a1472e7e80@syzkaller.appspotmail.com Signed-off-by: Johan Hovold <johan@kernel.org> Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2019-10-17 13:40:54 -07:00
..
appletalk	net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT	2018-09-29 03:08:52 -07:00
arcnet	arcnet: provide a buffer big enough to actually receive packets	2019-10-05 12:27:41 +02:00
bonding	bonding: Force slave speed check after link state recovery for 802.3ad	2019-09-06 10:18:05 +02:00
caif	caif-hsi: fix possible deadlock in cfhsi_exit_module()	2019-08-04 09:34:54 +02:00
can	can: mcp251x: mcp251x_hw_reset(): allow more time after a reset	2019-10-17 13:40:53 -07:00
cris
dsa	net: dsa: mv88e6xxx: Fix u64 statistics	2019-03-23 08:44:23 +01:00
ethernet	net: qlogic: Fix memory leak in ql_alloc_large_buffers	2019-10-07 21:01:05 +02:00
fddi
fjes
hamradio	net: hamradio: use eth_broadcast_addr	2018-08-24 13:26:55 +02:00
hippi
hyperv
ieee802154	ieee802154: atusb: fix use-after-free at disconnect	2019-10-17 13:40:54 -07:00
ipvlan	ipvlan: disallow userns cap_net_admin to change global mode/flags	2019-03-23 08:44:31 +01:00
irda
phy	net/phy: fix DP83865 10 Mbps HDX loopback disable function	2019-10-05 12:27:41 +02:00
plip
ppp	compat_ioctl: pppoe: fix PPPOEIOCSFWD handling	2019-08-11 12:20:46 +02:00
slip	slip: make slhc_free() silently accept an error pointer	2019-05-16 19:44:51 +02:00
team	team: Always enable vlan tx offload	2019-07-10 09:56:37 +02:00
usb	hso: fix NULL-deref on tty open	2019-10-07 21:01:04 +02:00
vmxnet3
wan	drivers: net: lmc: fix case value for target abort error	2018-09-05 09:18:36 +02:00
wimax	wimax/i2400m: fix a memory leak bug	2019-09-10 10:29:47 +01:00
wireless	libertas: Add missing sentinel at end of if_usb.c fw_table	2019-10-05 12:27:50 +02:00
xen-netback	xen/netback: Reset nr_frags before freeing skb	2019-08-25 10:53:05 +02:00
dummy.c
eql.c
geneve.c
ifb.c
Kconfig
LICENSE.SRC
loopback.c
macvlan.c
macvtap.c
Makefile
mdio.c
mii.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c	rapidio/rionet: do not free skb before reading its length	2018-12-13 09:21:26 +01:00
sb1000.c
Space.c
sungem_phy.c
tun.c	tun: fix use-after-free when register netdev failed	2019-09-21 07:12:41 +02:00
veth.c
virtio_net.c
vrf.c
vxlan.c	vxlan: Don't call gro_cells_destroy() before device is unregistered	2019-04-03 06:23:25 +02:00
xen-netfront.c	xen-netfront: do not use ~0U as error return value for xennet_fill_frags()	2019-10-07 21:01:06 +02:00