linux/drivers/net
Zhengchao Shao bcb3bb1069 hamradio: fix issue of dev reference count leakage in bpq_device_event()
[ Upstream commit 85cbaf032d ]

When following tests are performed, it will cause dev reference counting
leakage.
a)ip link add bond2 type bond mode balance-rr
b)ip link set bond2 up
c)ifenslave -f bond2 rose1
d)ip link del bond2

When new bond device is created, the default type of the bond device is
ether. And the bond device is up, bpq_device_event() receives the message
and creates a new bpq device. In this case, the reference count value of
dev is hold once. But after "ifenslave -f bond2 rose1" command is
executed, the type of the bond device is changed to rose. When the bond
device is unregistered, bpq_device_event() will not put the dev reference
count.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Zhengchao Shao <shaozhengchao@huawei.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-11-16 09:57:11 +01:00
..
appletalk
arcnet
bonding net: bonding: Unsync device addresses on ndo_stop 2022-09-28 11:10:31 +02:00
caif caif_virtio: fix race between virtio_device_ready() and ndo_open() 2022-07-07 17:52:18 +02:00
can can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive 2022-11-03 23:57:54 +09:00
dsa net: dsa: Fix possible memory leaks in dsa_loop_init() 2022-11-10 18:14:16 +01:00
ethernet net: fman: Unregister ethernet device on removal 2022-11-16 09:57:10 +01:00
fddi
fjes
hamradio hamradio: fix issue of dev reference count leakage in bpq_device_event() 2022-11-16 09:57:11 +01:00
hippi drivers: net: hippi: Fix deadlock in rr_close() 2022-05-09 09:05:06 +02:00
hyperv hv_netvsc: Fix race between VF offering and VF association message from host 2022-10-30 09:41:19 +01:00
ieee802154 ieee802154: cc2520: add rc code in cc2520_tx() 2022-09-20 12:38:32 +02:00
ipa net: ipa: properly limit modem routing table use 2022-09-28 11:10:34 +02:00
ipvlan ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header 2022-09-28 11:10:30 +02:00
mdio of: mdio: Add of_node_put() when breaking out of for_each_xx 2022-09-28 11:10:33 +02:00
netdevsim net: Use u64_stats_fetch_begin_irq() for stats fetch. 2022-09-08 11:11:40 +02:00
pcs
phy net: mdio: fix undefined behavior in bit shift for __mdiobus_register 2022-11-10 18:14:20 +01:00
plip plip: avoid rcu debug splat 2022-08-25 11:37:59 +02:00
ppp
slip drivers: net: slip: fix NPD bug in sl_tx_timeout() 2022-04-20 09:23:24 +02:00
team net: team: Unsync device addresses on ndo_stop 2022-09-28 11:10:31 +02:00
usb r8152: add PID for the Lenovo OneLink+ Dock 2022-10-30 09:41:16 +01:00
vmxnet3 net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() 2022-05-25 09:17:58 +02:00
wan net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() 2022-11-16 09:57:10 +01:00
wimax
wireguard wireguard: netlink: avoid variable-sized memcpy on sockaddr 2022-09-28 11:10:34 +02:00
wireless wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() 2022-11-10 18:14:29 +01:00
xen-netback xen-netback: only remove 'hotplug-status' when the vif is actually destroyed 2022-09-15 11:32:05 +02:00
bareudp.c bareudp: use ipv6_mod_enabled to check if IPv6 enabled 2022-04-08 14:40:22 +02:00
dummy.c
eql.c
geneve.c geneve: fix TOS inheriting for ipv4 2022-08-25 11:38:02 +02:00
gtp.c
ifb.c
Kconfig lib/crypto: blake2s: include as built-in 2022-05-30 09:33:26 +02:00
LICENSE.SRC
loopback.c
macsec.c macsec: clear encryption keys from the stack after setting up offload 2022-11-16 09:57:09 +01:00
macvlan.c
macvtap.c macvtap: advertise link netns via netlink 2022-04-13 21:00:59 +02:00
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() 2022-08-03 12:00:46 +02:00
tap.c tuntap: add sanity checks about msg_controllen in sendmsg 2022-04-13 21:00:59 +02:00
thunderbolt.c
tun.c net: tun: Fix memory leaks of napi_get_frags 2022-11-16 09:57:09 +01:00
veth.c veth: Ensure eth header is in skb's linear part 2022-04-20 09:23:11 +02:00
virtio_net.c virtio_net: fix memory leak inside XPD_TX with mergeable 2022-08-25 11:37:57 +02:00
vrf.c
vsockmon.c
vxlan.c vxlan: fix error return code in vxlan_fdb_append 2022-04-27 13:53:53 +02:00
xen-netfront.c xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() 2022-07-07 17:52:23 +02:00