Files
linux/drivers
Pan Bian cfc435198f rapidio/rionet: do not free skb before reading its length
skb is freed via dev_kfree_skb_any, however, skb->len is read then. This
may result in a use-after-free bug.

Fixes: e6161d6426 ("rapidio/rionet: rework driver initialization and removal")
Signed-off-by: Pan Bian <bianpan2016@163.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2018-11-28 10:38:48 -08:00
..
2018-10-16 11:13:50 +02:00
2018-10-11 12:12:55 +02:00
2018-11-09 17:56:44 +01:00
2018-10-31 08:54:16 -07:00
2018-10-11 09:16:44 -07:00
2018-11-11 09:21:46 -08:00