mbox series

[RESEND,6.1.y-cip,0/1] Backport fix for use-after-free in ravb driver

Message ID 20240709111747.247-1-paul.barker.ct@bp.renesas.com (mailing list archive)
Headers show
Series Backport fix for use-after-free in ravb driver | expand

Message

Paul Barker July 9, 2024, 11:17 a.m. UTC 
This patch fixes a use-after-free bug in the ravb driver, present in the
CIP 6.1 series from v6.1.92-cip22 onwards.

As the bug was introduced upstream in v6.9-rc1 and fixed in v6.9-rc5, no
stable upstream kernel release was vulnerable. However, when the patch
containing the bug was backported to CIP 6.1, the corresponding bugfix
patch was missed.

The bugfix was included as part of the backport to CIP 5.10, and the
buggy commit was not backported to CIP 4.4/4.19, so those series are not
vulnerable to this use-after-free.

Paul Barker (1):
  net: ravb: Fix GbEth jumbo packet RX checksum handling

 drivers/net/ethernet/renesas/ravb_main.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)