linux/drivers/net
Pavel Andrianov f0ed115fec net: pxa168_eth: Fix a potential data race in pxa168_eth_remove
[ Upstream commit 0571a753cb ]

pxa168_eth_remove() firstly calls unregister_netdev(),
then cancels a timeout work. unregister_netdev() shuts down a device
interface and removes it from the kernel tables. If the timeout occurs
in parallel, the timeout work (pxa168_eth_tx_timeout_task) performs stop
and open of the device. It may lead to an inconsistent state and memory
leaks.

Found by Linux Driver Verification project (linuxtesting.org).

Signed-off-by: Pavel Andrianov <andrianov@ispras.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-04-10 13:36:08 +02:00
..
appletalk
arcnet
bonding Revert "net: bonding: fix error return code of bond_neigh_init()" 2021-03-30 14:32:08 +02:00
caif
can can: tcan4x5x: fix max register value 2021-04-07 15:00:07 +02:00
dsa net: dsa: b53: VLAN filtering is global to all users 2021-03-30 14:32:08 +02:00
ethernet net: pxa168_eth: Fix a potential data race in pxa168_eth_remove 2021-04-10 13:36:08 +02:00
fddi
fjes
hamradio
hippi
hyperv hv_netvsc: Reset the RSC count if NVSP_STAT_FAIL in netvsc_receive() 2021-02-17 11:02:26 +01:00
ieee802154
ipa net: ipa: fix register write command validation 2021-04-07 15:00:08 +02:00
ipvlan
mdio
netdevsim netdevsim: dev: Initialize FIB module after debugfs 2021-04-07 15:00:07 +02:00
pcs
phy net: phy: broadcom: Fix RGMII delays for BCM50160 and BCM50610M 2021-03-30 14:32:05 +02:00
plip
ppp tty: convert tty_ldisc_ops 'read()' function to take a kernel pointer 2021-03-04 11:37:36 +01:00
slip
team
usb r8152: limit the RX buffer size of RTL8153A for USB 2.0 2021-03-30 14:32:02 +02:00
vmxnet3
wan net: wan/lmc: unregister device when no matching device is found 2021-04-07 15:00:08 +02:00
wimax
wireguard wireguard: queueing: get rid of per-peer ring buffers 2021-03-04 11:38:47 +01:00
wireless ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr() 2021-04-07 15:00:08 +02:00
xen-netback xen-netback: respect gnttab_map_refs()'s return value 2021-03-07 12:34:15 +01:00
bareudp.c
dummy.c
eql.c
geneve.c
gtp.c net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending 2021-03-04 11:38:46 +01:00
ifb.c
Kconfig crypto: mips/poly1305 - enable for all MIPS processors 2021-03-17 17:06:10 +01:00
LICENSE.SRC
loopback.c
macsec.c
macvlan.c
macvtap.c
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c net: fix dev_ifsioc_locked() race condition 2021-03-07 12:34:07 +01:00
thunderbolt.c
tun.c net: fix dev_ifsioc_locked() race condition 2021-03-07 12:34:07 +01:00
veth.c veth: Store queue_mapping independently of XDP prog presence 2021-03-30 14:31:56 +02:00
virtio_net.c
vrf.c
vsockmon.c
vxlan.c vxlan: move debug check after netdev unregister 2021-03-04 11:38:18 +01:00
xen-netfront.c