]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7141990) | patch
batman-adv: gw: acquire ethernet header only after skb realloc
authorSven Eckelmann <sven@narfation.org>
Sun, 28 Jun 2026 06:45:41 +0000 (08:45 +0200)
committerSven Eckelmann <sven@narfation.org>
Sun, 28 Jun 2026 07:58:22 +0000 (09:58 +0200)
commit77880a3be88d378d60cc1e8f8ec70430e2ed0518
tree3d8c77dae8e0b15978b17e2eb5d800f1523840bftree | snapshot
parent7141990add3f75436f2933cb310654cad3b1e3e9commit | diff
batman-adv: gw: acquire ethernet header only after skb realloc

The pskb_may_pull() called by batadv_get_vid() could reallocate the buffer
behind the skb. Variables which were pointing to the old buffer need to be
reassigned to avoid an use-after-free.

Cc: stable@vger.kernel.org
Fixes: 6c413b1c22a2 ("batman-adv: send every DHCP packet as bat-unicast")
Signed-off-by: Sven Eckelmann <sven@narfation.org>
net/batman-adv/gateway_client.c diff | blob | blame | history
A mirror of Linus' kernel repository