Tong Zhang 8ee9d82cd0 epic100: fix use after free on rmmod ... epic_close() calls epic_rx() and uses dma buffer, but in epic_remove_one() we already freed the dma buffer. To fix this issue, reorder function calls like in the .probe function. BUG: KASAN: use-after-free in epic_rx+0xa6/0x7e0 [epic100] Call Trace: epic_rx+0xa6/0x7e0 [epic100] epic_close+0xec/0x2f0 [epic100] unregister_netdev+0x18/0x20 epic_remove_one+0xaa/0xf0 [epic100] Fixes: 1da177e4c3 ("Linux-2.6.12-rc2") Reported-by: Yilun Wu <yiluwu@cs.stonybrook.edu> Signed-off-by: Tong Zhang <ztong0001@gmail.com> Reviewed-by: Francois Romieu <romieu@fr.zoreil.com> Link: https://lore.kernel.org/r/20220627043351.25615-1-ztong0001@gmail.com Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-06-27 21:48:51 -07:00
..
appletalk	net: appletalk: remove Apple/Farallon LocalTalk PC support	2022-05-11 13:08:38 +01:00
arcnet
bonding	bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers	2022-06-17 20:18:44 -07:00
caif	caif_virtio: switch to netif_napi_add_weight()	2022-05-08 11:33:57 +01:00
can	can: ctucanfd: platform: add missing dependency to HAS_IOMEM	2022-05-23 22:00:06 +02:00
dsa	net: dsa: bcm_sf2: force pause link settings	2022-06-23 20:46:39 -07:00
ethernet	epic100: fix use after free on rmmod	2022-06-27 21:48:51 -07:00
fddi	net: fddi: skfp: smt: Remove extra parameters to vararg macro	2022-05-22 23:05:56 +01:00
fjes
hamradio	hamradio: 6pack: fix array-index-out-of-bounds in decode_std_command()	2022-06-17 11:39:46 +01:00
hippi
hyperv	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-05-23 21:19:17 -07:00
ieee802154
ipa	net: ipa: fix page free in ipa_endpoint_replenish_one()	2022-05-27 18:29:50 -07:00
ipvlan	net: add netif_inherit_tso_max()	2022-05-06 12:07:56 +01:00
mctp
mdio	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-05-05 13:03:18 -07:00
netdevsim	netdevsim: rely on XFRM state direction instead of flags	2022-05-06 08:34:33 +02:00
pcs
phy	net: dp83822: disable rx error interrupt	2022-06-24 16:33:22 -07:00
plip
ppp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-05-19 11:23:59 -07:00
slip
team
usb	net: usb: ax88179_178a needs FLAG_SEND_ZLP	2022-06-15 09:32:12 +01:00
vmxnet3	net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()	2022-05-17 12:03:52 +02:00
vxlan	net: vxlan: Fix kernel coding style	2022-05-20 17:38:27 -07:00
wan	net: wan: switch to netif_napi_add_weight()	2022-05-08 11:33:57 +01:00
wireguard
wireless	USB / Thunderbolt changes for 5.19-rc1	2022-06-03 11:17:49 -07:00
wwan	wwan: iosm: use a flexible array rather than allocate short objects	2022-05-20 17:56:50 -07:00
xen-netback	xen/netback: fix incorrect usage of RING_HAS_UNCONSUMED_REQUESTS()	2022-05-31 12:22:22 +02:00
amt.c	amt: fix wrong type string definition	2022-06-06 14:27:35 -07:00
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c
ifb.c
Kconfig
LICENSE.SRC
loopback.c	net: loopback: enable BIG TCP packets	2022-05-16 10:18:56 +01:00
macsec.c	macsec: fix UAF bug for real_dev	2022-06-01 12:01:47 +02:00
macvlan.c	rtnetlink: add extack support in fdb del handlers	2022-05-09 11:58:20 +01:00
macvtap.c
Makefile
mdio.c
mhi_net.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c	eth: amd: remove NI6510 support (ni65)	2022-05-11 13:09:59 +01:00
sungem_phy.c	sungem: Prepare cleanup of powerpc's asm/prom.h	2022-05-05 15:52:27 -07:00
tap.c
thunderbolt.c
tun.c	net: tun: stop NAPI when detaching queues	2022-06-27 21:48:01 -07:00
veth.c	veth: Add updating of trans_start	2022-06-17 11:38:09 +01:00
virtio_net.c	virtio_net: fix xdp_rxq_info bug after suspend/resume	2022-06-22 19:09:13 -07:00
vrf.c
vsockmon.c
xen-netfront.c	xen: switch gnttab_end_foreign_access() to take a struct page pointer	2022-05-27 11:05:29 +02:00