linux/drivers/net/usb
Wentao Liang 17741334d0 net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()
usb_get_from_anchor() hands over a reference to the URB, which the caller
must release. lan78xx_submit_deferred_urbs() never does, so every deferred
Tx URB keeps an extra reference: the counter grows on each suspend/resume
cycle and the URBs are never freed when the buffers are released. Drop
the reference after submitting, and on the path that drops the packet
instead of submitting it.

Fixes: 5f4cc6e251 ("lan78xx: Fix race conditions in suspend/resume handling")
Cc: stable@vger.kernel.org
Signed-off-by: Wentao Liang <vulab@iscas.ac.cn>
Link: https://patch.msgid.link/20260917115811.2150119-1-vulab@iscas.ac.cn
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2026-09-22 15:54:42 +02:00
..
aqc111.c
aqc111.h
asix_common.c
asix_devices.c
asix.h
ax88172a.c
ax88179_178a.c
catc.c net: usb: catc: bound the RX packet length in catc_rx_done() 2026-09-19 15:41:59 -07:00
cdc_eem.c
cdc_ether.c
cdc_mbim.c
cdc_ncm.c
cdc_subset.c
cdc-phonet.c
ch9200.c
cx82310_eth.c net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow 2026-09-04 16:05:48 -07:00
dm9601.c
gl620a.c
hso.c net: hso: fix TIOCMIWAIT race 2026-09-10 11:09:50 +02:00
huawei_cdc_ncm.c
int51x1.c
ipheth.c
kalmia.c
kaweth.c
Kconfig
lan78xx.c net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() 2026-09-22 15:54:42 +02:00
lan78xx.h
lg-vl600.c
Makefile
mcs7830.c
net1080.c
pegasus.c
pegasus.h
plusb.c
qmi_wwan.c net: usb: qmi_wwan: add Quectel RG660QB 2026-09-07 17:28:59 -07:00
r8152.c
r8153_ecm.c
rndis_host.c
rtl8150.c
sierra_net.c
smsc75xx.c
smsc75xx.h
smsc95xx.c
smsc95xx.h
sr9700.c net: usb: sr9700: include receive overhead in the length check 2026-09-21 17:22:54 -07:00
sr9700.h
sr9800.c
sr9800.h
usbnet.c
zaurus.c