net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb()
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 12 Apr 2022 09:24:19 +0000 (12:24 +0300)
committerDavid S. Miller <davem@davemloft.net>
Wed, 13 Apr 2022 11:24:20 +0000 (12:24 +0100)
commit17a5f6a78dc7b8db385de346092d7d9f9dc24df6
tree746342fbc4d2f007828d9eb7829c12ecdd330baa
parent2240514cb6441641111ac1fabab03e9df9972d7f
net: ethernet: mtk_eth_soc: use after free in __mtk_ppe_check_skb()

The __mtk_foe_entry_clear() function frees "entry" so we have to use
the _safe() version of hlist_for_each_entry() to prevent a use after
free.

Fixes: 33fc42de3327 ("net: ethernet: mtk_eth_soc: support creating mac address based offload entries")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
drivers/net/ethernet/mediatek/mtk_ppe.c