]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration
authorMiaoqian Lin <linmq006@gmail.com>
Thu, 11 Dec 2025 08:13:13 +0000 (12:13 +0400)
committerPaolo Abeni <pabeni@redhat.com>
Mon, 22 Dec 2025 11:18:54 +0000 (12:18 +0100)
When nvmem_cell_read() fails in mt798x_phy_calibration(), the function
returns without calling nvmem_cell_put(), leaking the cell reference.

Move nvmem_cell_put() right after nvmem_cell_read() to ensure the cell
reference is always released regardless of the read result.

Found via static analysis and code review.

Fixes: 98c485eaf509 ("net: phy: add driver for MediaTek SoC built-in GE PHYs")
Cc: stable@vger.kernel.org
Signed-off-by: Miaoqian Lin <linmq006@gmail.com>
Reviewed-by: Daniel Golle <daniel@makrotopia.org>
Reviewed-by: Andrew Lunn <andrew@lunn.ch>
Link: https://patch.msgid.link/20251211081313.2368460-1-linmq006@gmail.com
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
drivers/net/phy/mediatek/mtk-ge-soc.c

index cd09fbf92ef23a80ead647874a7601b8100277c3..2c4bbc236202b781120891fc3ab45d188ce5e82e 100644 (file)
@@ -1167,9 +1167,9 @@ static int mt798x_phy_calibration(struct phy_device *phydev)
        }
 
        buf = (u32 *)nvmem_cell_read(cell, &len);
+       nvmem_cell_put(cell);
        if (IS_ERR(buf))
                return PTR_ERR(buf);
-       nvmem_cell_put(cell);
 
        if (!buf[0] || !buf[1] || !buf[2] || !buf[3] || len < 4 * sizeof(u32)) {
                phydev_err(phydev, "invalid efuse data\n");