Ziwei Xiao 2ce5341c36 gve: Clear napi->skb before dev_kfree_skb_any() ...

commit 6f4d93b78a upstream.

gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it
is freed with dev_kfree_skb_any(). This can result in a subsequent call
to napi_get_frags returning a dangling pointer.

Fix this by clearing napi->skb before the skb is freed.

Fixes: 9b8dd5e5ea ("gve: DQO: Add RX path")
Cc: stable@vger.kernel.org
Reported-by: Shailend Chand <shailend@google.com>
Signed-off-by: Ziwei Xiao <ziweixiao@google.com>
Reviewed-by: Harshitha Ramamurthy <hramamurthy@google.com>
Reviewed-by: Shailend Chand <shailend@google.com>
Reviewed-by: Praveen Kaligineedi <pkaligineedi@google.com>
Link: https://lore.kernel.org/r/20240612001654.923887-1-ziweixiao@google.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-06-21 14:38:25 +02:00

..

appletalk

…

arcnet

…

bonding

bonding: fix oops during rmmod

2024-06-16 13:47:43 +02:00

caif

…

can

can: m_can: Start/Cancel polling timer together with interrupts

2024-03-26 18:19:29 -04:00

dsa

net: dsa: microchip: fix RGMII error in KSZ DSA driver

2024-06-12 11:12:59 +02:00

ethernet

gve: Clear napi->skb before dev_kfree_skb_any()

2024-06-21 14:38:25 +02:00

fddi

…

fjes

fjes: fix memleaks in fjes_hw_setup

2024-01-31 16:19:05 -08:00

hamradio

…

hippi

…

hyperv

hv_netvsc: Don't free decrypted memory

2024-05-17 12:02:17 +02:00

ieee802154

…

ipa

net: ipa: don't overrun IPA suspend interrupt registers

2024-03-01 13:35:08 +01:00

ipvlan

ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound

2024-06-12 11:12:59 +02:00

mctp

…

mdio

…

netdevsim

netdevsim: avoid potential loop in nsim_dev_trap_report_work()

2024-02-16 19:10:47 +01:00

pcs

net: pcs: xpcs: Return EINVAL in the internal methods

2024-04-13 13:07:31 +02:00

phy

net: phy: Micrel KSZ8061: fix errata solution not taking effect problem

2024-06-21 14:38:16 +02:00

plip

…

ppp

ppp_async: limit MRU to 64K

2024-02-16 19:10:50 +01:00

pse-pd

…

slip

…

team

…

thunderbolt

…

usb

net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM

2024-06-12 11:12:56 +02:00

vmxnet3

vmxnet3: disable rx data ring on dma allocation failure

2024-06-21 14:38:15 +02:00

vxlan

vxlan: Fix regression when dropping packets due to invalid src addresses

2024-06-21 14:38:17 +02:00

wan

…

wireguard

wireguard: netlink: access device through ctx instead of peer

2024-04-03 15:28:36 +02:00

wireless

wifi: iwlwifi: mvm: don't read past the mfuart notifcation

2024-06-21 14:38:13 +02:00

wwan

net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

2024-06-21 14:38:18 +02:00

xen-netback

kthread: add kthread_stop_put

2024-06-12 11:12:52 +02:00

amt.c

amt: do not use overwrapped cb area

2024-01-25 15:35:56 -08:00

bareudp.c

…

dummy.c

net: add netdev_lockdep_set_classes() to virtual drivers

2024-04-13 13:07:30 +02:00

eql.c

…

geneve.c

geneve: fix header validation in geneve[6]_xmit_skb

2024-04-17 11:19:28 +02:00

gtp.c

net: gtp: Fix Use-After-Free in gtp_dellink

2024-05-02 16:32:36 +02:00

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

net: add netdev_lockdep_set_classes() to virtual drivers

2024-04-13 13:07:30 +02:00

macsec.c

macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst

2024-05-02 16:32:50 +02:00

macvlan.c

…

macvtap.c

…

Makefile

net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled

2024-06-12 11:12:46 +02:00

mdio.c

…

mhi_net.c

…

mii.c

…

net_failover.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

…

tun.c

tun: limit printing rate when illegal packet received by tun dev

2024-04-27 17:11:33 +02:00

veth.c

net: add netdev_lockdep_set_classes() to virtual drivers

2024-04-13 13:07:30 +02:00

virtio_net.c

virtio_net: Do not send RSS key if it is not supported

2024-04-27 17:11:43 +02:00

vrf.c

…

vsockmon.c

…

xen-netfront.c

xen-netfront: Add missing skb_mark_for_recycle

2024-04-10 16:35:49 +02:00