| commit | 0336f8ffece62f882ab3012820965a786a983f70 | [log] [tgz] |
|---|---|---|
| author | Pavel Skripkin <paskripkin@gmail.com> | Fri Jul 09 17:58:29 2021 +0300 |
| committer | David S. Miller <davem@davemloft.net> | Fri Jul 09 11:01:01 2021 -0700 |
| tree | 88942d2c0c3b4f3873c9ed53ff04c10909fc6a93 | |
| parent | ad297cd2db8953e2202970e9504cab247b6c7cb4 [diff] |
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be
used after free_netdev() call. Using priv after free_netdev()
can cause UAF bug. Fix it by moving free_netdev() at the end of the
function.
Fixes: 1e0a8b13d355 ("tlan: cancel work at remove path")
Signed-off-by: Pavel Skripkin <paskripkin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>