[PATCH] netvsc: fix use-after-free in netvsc_change_mtu()

Stephen Hemminger stephen at networkplumber.org
Thu Mar 2 17:06:52 UTC 2017


On Thu, 2 Mar 2017 13:00:53 +0000
Dexuan Cui <decui at microsoft.com> wrote:

> 'nvdev' is freed in rndis_filter_device_remove -> netvsc_device_remove ->
> free_netvsc_device, so we mustn't access it, before it's re-created in
> rndis_filter_device_add -> netvsc_device_add.
> 
> Signed-off-by: Dexuan Cui <decui at microsoft.com>
> Cc: "K. Y. Srinivasan" <kys at microsoft.com>
> Cc: Haiyang Zhang <haiyangz at microsoft.com>
> Cc: Stephen Hemminger <sthemmin at microsoft.com>

Reviewed-by: Stephen Hemminger <sthemmin at microsoft.com>


More information about the devel mailing list