]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net: atm: fix use after free in lec_send()
authorDan Carpenter <dan.carpenter@linaro.org>
Fri, 14 Mar 2025 10:10:57 +0000 (13:10 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 10 Apr 2025 12:31:54 +0000 (14:31 +0200)
commit82d9084a97892de1ee4881eb5c17911fcd9be6f6
treea952ef5f5622255d0da64071e146ed710a0d10eb
parentd2ae4cc39c1ad63f1c8ecef7aeb13a2c41822e0c
net: atm: fix use after free in lec_send()

[ Upstream commit f3009d0d6ab78053117f8857b921a8237f4d17b3 ]

The ->send() operation frees skb so save the length before calling
->send() to avoid a use after free.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Simon Horman <horms@kernel.org>
Link: https://patch.msgid.link/c751531d-4af4-42fe-affe-6104b34b791d@stanley.mountain
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/atm/lec.c