netdev - [BUG]drivers: net: usb: usbnet.c: dangling pointer in function usbnet_start

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CANTwqXD1zfeyjXD+eyjzSaKBuT5k-4HQJ36AR4u3eUVzeO8b6Q@mail.gmail.com>
Date:   Sun, 1 Aug 2021 16:02:18 +0800
From:   nil Yi <teroincn@...il.com>
To:     oneukum@...e.com, netdev@...r.kernel.org
Subject: [BUG]drivers: net: usb: usbnet.c: dangling pointer in function usbnet_start_xmit

Hi,
I found there leaves a dangling pointer urb in function
usbnet_start_xmit in v5.14-rc3,
1386:  entry->urb = urb;
1451:  usb_put_urb(urb);
1454:  goto deferred;

1492:   deferred:
1494:         return NETDEV_TX_OK;

left a pointer in entry->urb,  I'm not sure whether it cound be used
in usbnet_bh

Any feedback would be appreciated, thanks :)


Best wishes,
Nil Yi