]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net: atm: fix use after free in lec_send()
authorDan Carpenter <dan.carpenter@linaro.org>
Fri, 14 Mar 2025 10:10:57 +0000 (13:10 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 28 Mar 2025 21:03:28 +0000 (22:03 +0100)
commit326223182e4703cde99fdbd36d07d0b3de9980fb
tree88756996043938312761bc3bcc77341678b8881f
parent99918fb674d256518590202ec288ca6eb75cd078
net: atm: fix use after free in lec_send()

[ Upstream commit f3009d0d6ab78053117f8857b921a8237f4d17b3 ]

The ->send() operation frees skb so save the length before calling
->send() to avoid a use after free.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/c751531d-4af4-42fe-affe-6104b34b791d@stanley.mountain
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/atm/lec.c