mirror-linux/drivers
Abdun Nihaal 27c7e63b3c wifi: at76c50x: fix use after free access in at76_disconnect
The memory pointed to by priv is freed at the end of at76_delete_device
function (using ieee80211_free_hw). But the code then accesses the udev
field of the freed object to put the USB device. This may also lead to a
memory leak of the usb device. Fix this by using udev from interface.

Fixes: 29e20aa6c6 ("at76c50x-usb: fix use after free on failure path in at76_probe()")
Signed-off-by: Abdun Nihaal <abdun.nihaal@gmail.com>
Link: https://patch.msgid.link/20250330103110.44080-1-abdun.nihaal@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2025-04-02 10:43:56 +02:00
..
accel A sched fence reference leak fix, two fence fixes for v3d, two overflow 2025-03-21 10:41:51 +10:00
accessibility
acpi Networking changes for 6.15. 2025-03-26 21:48:21 -07:00
amba iommu: Get DT/ACPI parsing into the proper probe path 2025-03-11 14:05:43 +01:00
android binderfs: fix use-after-free in binder_devices 2025-02-20 15:20:11 +01:00
ata ata changes for 6.15 2025-03-26 19:49:02 -07:00
atm
auxdisplay auxdisplay: hd44780: Rename hd to hdc in hd44780_common_alloc() 2025-03-10 18:03:02 +02:00
base IOMMU Updates for Linux v6.15 2025-03-26 20:10:09 -07:00
bcma
block for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
bluetooth Bluetooth: btnxpuart: Fix kernel panic during FW release 2025-03-25 15:22:17 -04:00
bus Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 's390', 'core', 'intel/vt-d' and 'amd/amd-vi' into next 2025-03-20 09:11:09 +01:00
cache
cdrom
cdx Merge branches 'apple/dart', 'arm/smmu/updates', 'arm/smmu/bindings', 'rockchip', 's390', 'core', 'intel/vt-d' and 'amd/amd-vi' into next 2025-03-20 09:11:09 +01:00
char platform-drivers-x86 for v6.15-1 2025-03-26 09:54:40 -07:00
clk Samsung clock controller fixes for v6.14 2025-03-11 10:51:13 -07:00
clocksource Updates for clocksource/event drivers: 2025-03-26 13:30:27 -07:00
comedi
connector
counter
cpufreq Power management updates for 6.15-rc1 2025-03-25 15:00:18 -07:00
cpuidle pmdomain core: 2025-03-25 20:40:51 -07:00
crypto CRC updates for 6.15 2025-03-25 18:33:04 -07:00
cxl
dax
dca
devfreq PM / devfreq: rockchip-dfi: Switch to use hrtimer_setup() 2025-02-18 10:32:34 +01:00
dio
dma dmaengine fixes for v6.14 2025-03-02 10:08:45 -08:00
dma-buf
dpll Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2025-03-20 21:38:01 +01:00
edac - Add infrastructure support to EDAC in order to be able to register memory 2025-03-25 14:00:26 -07:00
eisa
extcon
firewire
firmware sound updates for 6.15-rc1 2025-03-26 09:41:55 -07:00
fpga
fsi
gnss
gpio Networking changes for 6.15. 2025-03-26 21:48:21 -07:00
gpu A treewide hrtimer timer cleanup 2025-03-25 10:54:15 -07:00
greybus
hid Merge branch 'for-6.15/wacom' into for-linus 2025-03-26 13:56:38 +01:00
hsi
hte
hv hyperv-next for 6.15 2025-03-25 14:47:04 -07:00
hwmon platform-drivers-x86 for v6.15-1 2025-03-26 09:54:40 -07:00
hwspinlock
hwtracing ARM: 2025-03-25 14:22:07 -07:00
i2c A treewide hrtimer timer cleanup 2025-03-25 10:54:15 -07:00
i3c
idle Power management updates for 6.15-rc1 2025-03-25 15:00:18 -07:00
iio regulator: Updates for v6.15 2025-03-25 19:04:20 -07:00
infiniband Networking changes for 6.15. 2025-03-26 21:48:21 -07:00
input Input updates for v6.14-rc6 2025-03-15 15:46:29 -10:00
interconnect
iommu IOMMU Updates for Linux v6.15 2025-03-26 20:10:09 -07:00
ipack
irqchip IOMMU Updates for Linux v6.15 2025-03-26 20:10:09 -07:00
isdn
leds gpio updates for v6.15-rc1 2025-03-25 20:05:43 -07:00
macintosh
mailbox mailbox: Switch to use hrtimer_setup() 2025-02-18 11:19:04 +01:00
mcb
md for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
media [GIT PULL for v6.15] media updates 2025-03-25 21:00:31 -07:00
memory memory: omap-gpmc: drop no compatible check 2025-03-14 17:59:17 +01:00
memstick for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
message SCSI misc on 20250326 2025-03-26 19:57:34 -07:00
mfd PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally 2025-02-19 13:22:12 +01:00
misc A treewide hrtimer timer cleanup 2025-03-25 10:54:15 -07:00
mmc for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
most
mtd for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
mux mux: gpio: use gpiod_multi_set_value_cansleep 2025-02-17 14:27:34 +01:00
net wifi: at76c50x: fix use after free access in at76_disconnect 2025-04-02 10:43:56 +02:00
nfc
ntb A treewide hrtimer timer cleanup 2025-03-25 10:54:15 -07:00
nubus
nvdimm badblocks: use sector_t instead of int to avoid truncation of badblocks length 2025-03-06 08:04:52 -07:00
nvme for-6.15/block-20250322 2025-03-26 18:08:55 -07:00
nvmem net, treewide: define and use MAC_ADDR_STR_LEN 2025-03-19 19:17:58 +01:00
of Networking changes for 6.15. 2025-03-26 21:48:21 -07:00
opp
parisc
parport
pci IOMMU Updates for Linux v6.15 2025-03-26 20:10:09 -07:00
pcmcia
peci
perf lsm/stable-6.15 PR 20250323 2025-03-25 15:44:19 -07:00
phy Linux 6.14-rc5 2025-03-03 09:32:11 +01:00
pinctrl pinctrl: spacemit: PINCTRL_SPACEMIT_K1 should not default to y unconditionally 2025-03-18 14:11:46 +01:00
platform platform-drivers-x86 for v6.15-1 2025-03-26 09:54:40 -07:00
pmdomain pmdomain: arm: scmi_pm_domain: Remove redundant state verification 2025-03-17 11:12:01 +01:00
pnp PNP: Remove prehistoric deadcode 2025-03-12 20:37:56 +01:00
power A treewide hrtimer timer cleanup 2025-03-25 10:54:15 -07:00
powercap Power management updates for 6.15-rc1 2025-03-25 15:00:18 -07:00
pps pps: generators: pps_gen_parport: Switch to use hrtimer_setup() 2025-02-18 11:19:03 +01:00
ps3
ptp ptp: ocp: reject unsupported periodic output flags 2025-03-20 08:50:03 +01:00
pwm pwm: stmpe: Allow to compile as a module 2025-03-03 10:38:54 +01:00
rapidio rapidio: add check for rio_add_net() in rio_scan_alloc_net() 2025-03-05 21:36:19 -08:00
ras
regulator regulator: Updates for v6.15 2025-03-25 19:04:20 -07:00
remoteproc
reset reset: mchp: sparx5: Fix for lan966x 2025-03-13 09:40:26 +01:00
rpmsg
rtc rtc: class: Switch to use hrtimer_setup() 2025-02-18 11:19:03 +01:00
s390 Networking changes for 6.15. 2025-03-26 21:48:21 -07:00
sbus
scsi SCSI misc on 20250326 2025-03-26 19:57:34 -07:00
sh
siox
slimbus slimbus: messaging: Free transaction ID in delayed interrupt scenario 2025-02-20 15:19:51 +01:00
soc Updates for MSI interrupts 2025-03-25 09:15:17 -07:00
soundwire
spi spi: Updates for v6.15 2025-03-25 19:28:14 -07:00
spmi
ssb
staging [GIT PULL for v6.15] media updates 2025-03-25 21:00:31 -07:00
target SCSI misc on 20250326 2025-03-26 19:57:34 -07:00
tc
tee tee: optee: Fix supplicant wait loop 2025-02-14 15:17:34 +01:00
thermal Thermal control updates for 6.15-rc1 2025-03-25 15:13:31 -07:00
thunderbolt CRC updates for 6.15 2025-03-25 18:33:04 -07:00
tty serial: xilinx_uartps: Use helper function hrtimer_update_function() 2025-02-18 17:41:35 +01:00
ufs SCSI misc on 20250326 2025-03-26 19:57:34 -07:00
uio
usb SCSI misc on 20250326 2025-03-26 19:57:34 -07:00
vdpa
vfio make use of anon_inode_getfile_fmode() 2025-02-21 10:25:31 +01:00
vhost vhost: return task creation error instead of NULL 2025-03-01 02:52:52 -05:00
video fbdev: hyperv_fb: Allow graceful removal of framebuffer 2025-03-09 23:56:29 +00:00
virt Linux 6.14-rc7 2025-03-19 11:03:06 +01:00
virtio virtio: mem: Switch to use hrtimer_setup() 2025-02-18 11:19:07 +01:00
w1
watchdog watchdog: Switch to use hrtimer_setup() 2025-02-18 10:32:33 +01:00
xen xen/pci: Do not register devices with segments >= 0x10000 2025-03-21 08:15:26 +01:00
zorro
Kconfig
Makefile