Michael S. Tsirkin 0246555550 virtio_net: fix use after free on allocation failure ...

In the extremely unlikely event that driver initialization fails after
RX buffers are added, virtio net frees RX buffers while VQs are
still active, potentially causing device to use a freed buffer.

To fix, reset device first - same as we do on device removal.

Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Reviewed-by: Cornelia Huck <cornelia.huck@de.ibm.com>
Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>

2014-10-15 10:25:05 +10:30

..

appletalk

…

arcnet

Merge tag 'pci-v3.17-changes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

2014-08-14 18:10:33 -06:00

bonding

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2014-08-05 18:46:26 -07:00

caif

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

can

can: flexcan: handle state passive -> warning transition

2014-08-21 10:50:00 +02:00

cris

eth_v10: remove unnecessary break after return

2014-07-20 21:29:49 -07:00

dsa

net: dsa: update DSA drivers to use ds_to_priv

2014-04-30 13:31:25 -04:00

ethernet

amd-xgbe: Enable interrupts for all management counters

2014-09-05 22:37:30 -07:00

fddi

drivers/net/fddi/skfp/h/skfbi.h: Remove useless PCI_BASE_2ND macros

2014-09-05 14:51:09 -07:00

hamradio

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

hippi

PCI: Remove DEFINE_PCI_DEVICE_TABLE macro use

2014-08-12 12:15:14 -06:00

hyperv

hyperv: Adjust the size of sendbuf region to support ws2008r2

2014-08-06 13:52:07 -07:00

ieee802154

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

irda

Merge tag 'pci-v3.17-changes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

2014-08-14 18:10:33 -06:00

phy

phy: fix EEE checks inside the phy_init_eee.

2014-08-27 16:29:39 -07:00

plip

…

ppp

net: filter: split 'struct sk_filter' into socket and bpf parts

2014-08-02 15:03:58 -07:00

slip

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

team

team: Simplify return path of team_newlink

2014-08-05 16:37:51 -07:00

usb

net: fix USB network driver config option.

2014-08-06 16:00:20 -07:00

vmxnet3

VMXNET3: Check for map error in vmxnet3_set_mc

2014-09-05 11:50:39 -07:00

wan

Merge tag 'pci-v3.17-changes-2' of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

2014-08-14 18:10:33 -06:00

wimax

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

wireless

Merge branch 'for-john' of git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-fixes

2014-09-04 13:12:02 -04:00

xen-netback

xen-netback: move netif_napi_add before binding interrupt

2014-08-25 17:31:42 -07:00

dummy.c

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

eql.c

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

ifb.c

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

Kconfig

vxlan: Call udp_sock_create

2014-07-14 16:12:15 -07:00

LICENSE.SRC

…

loopback.c

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

macvlan.c

macvlan: Allow setting multicast filter on all macvlan types

2014-08-21 16:54:25 -07:00

macvtap.c

mactap: Fix checksum errors for non-gso packets in bridge mode

2014-04-30 16:12:22 -04:00

Makefile

net: reduce USB network driver config options.

2014-08-05 16:48:59 -07:00

mdio.c

…

mii.c

…

netconsole.c

…

nlmon.c

net: nlmon: flag nlmon devs with LLTX/SG

2014-03-28 16:49:47 -04:00

ntb_netdev.c

net: use ethtool_cmd_speed_set helper to set ethtool speed value

2014-06-06 16:24:07 -07:00

rionet.c

net: get rid of SET_ETHTOOL_OPS

2014-05-13 17:43:20 -04:00

sb1000.c

…

Space.c

…

sungem_phy.c

…

tun.c

net: set name_assign_type in alloc_netdev()

2014-07-15 16:12:48 -07:00

veth.c

net: rtnetlink - make create_link take name_assign_type

2014-07-15 16:13:07 -07:00

virtio_net.c

virtio_net: fix use after free on allocation failure

2014-10-15 10:25:05 +10:30

vxlan.c

vxlan: fix incorrect initializer in union vxlan_addr

2014-08-22 19:54:56 -07:00

xen-netfront.c

xen-netfront: Fix handling packets on compound pages with skb_linearize

2014-08-11 14:46:41 -07:00