projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0eb1762) | patch
ipmi: fix use after free in _ipmi_destroy_user()
authorDan Carpenter <error27@gmail.com>
Tue, 15 Nov 2022 13:17:43 +0000 (16:17 +0300)
committerCorey Minyard <cminyard@mvista.com>
Tue, 15 Nov 2022 14:14:29 +0000 (08:14 -0600)
commita92ce570c81dc0feaeb12a429b4bc65686d17967
tree5a53dc2a26bfa737934cd80bf1d9dae4d6350e74tree | snapshot
parent0eb1762f3c77a20f4a93f29239f0cb0a52d41dd6commit | diff
ipmi: fix use after free in _ipmi_destroy_user()

The intf_free() function frees the "intf" pointer so we cannot
dereference it again on the next line.

Fixes: cbb79863fc31 ("ipmi: Don't allow device module unload when in use")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Message-Id: <Y3M8xa1drZv4CToE@kili>
Cc: <stable@vger.kernel.org> # 5.5+
Signed-off-by: Corey Minyard <cminyard@mvista.com>
drivers/char/ipmi/ipmi_msghandler.c diff | blob | history
Domain: System / Kernel;