linux/drivers/net/ethernet/cadence
Théo Lebrun 27f575836c net: macb: drop in-flight Tx SKBs on close
The MACB driver has since forever leaked the outgoing SKBs that
have not yet been marked as completed. They live in queue->tx_skb
which gets freed without remorse nor checking.

macb_free_consistent() gets called in a few codepaths, but only close will
trigger the added expressions. In macb_open() and macb_alloc_consistent()
failure cases, queues' tx_skb just got allocated and are empty.

Fixes: 89e5785fc8 ("[PATCH] Atmel MACB ethernet driver")
Cc: stable@vger.kernel.org
Reviewed-by: Nicolai Buchwitz <nb@tipi-net.de>
Signed-off-by: Théo Lebrun <theo.lebrun@bootlin.com>
Link: https://patch.msgid.link/20260702-macb-drop-tx-v4-1-1c833eebdbc8@bootlin.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
2026-07-09 10:48:15 +02:00
..
Kconfig ethernet: fix PTP_1588_CLOCK dependencies 2021-08-13 17:49:05 -07:00
macb_main.c net: macb: drop in-flight Tx SKBs on close 2026-07-09 10:48:15 +02:00
macb_pci.c net: macb: properly unregister fixed rate clocks 2026-04-01 19:57:20 -07:00
macb_ptp.c net: macb: fix use-after-free access to PTP clock 2026-03-18 17:18:47 -07:00
macb.h net: macb: Introduce macb_queue_isr_clear() helper function 2026-04-03 15:51:04 -07:00
Makefile