Yang Yingliang
203d604bd5
Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() ...
[ Upstream commit 0ba18967d4544955b2eff2fbc4f2a8750c4df90a ]
It is not allowed to call kfree_skb() from hardware interrupt
context or with interrupts being disabled. So replace kfree_skb()
with dev_kfree_skb_irq() under spin_lock_irqsave().
Fixes: 81be03e026dc ("Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-01-18 11:41:16 +01:00
9p/xen: check logical size for buffer size
2022-12-14 11:30:41 +01:00
net/atm: fix proc_mpc_write incorrect return value
2022-10-29 10:20:35 +02:00
ax25: Fix UAF bugs in ax25 timers
2022-04-20 09:19:40 +02:00
batman-adv: Don't skb_split skbuffs with frag_list
2022-05-18 09:47:24 +02:00
Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
bpf: Move skb->len == 0 checks into __bpf_redirect
2023-01-18 11:41:04 +01:00
netfilter: ebtables: fix memory leak when blob is malformed
2022-09-28 11:04:07 +02:00
net: caif: fix double disconnect client in chnl_net_open()
2022-11-25 17:42:15 +01:00
can: af_can: fix NULL pointer dereference in can_rcv_filter
2022-12-14 11:30:44 +01:00
bpf, sockmap: fix race in sock_map_free()
2023-01-18 11:41:09 +01:00
dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
2022-12-08 11:22:59 +01:00
net: dsa: ksz: Check return value
2022-12-14 11:30:45 +01:00
hsr: Avoid double remove of a node.
2023-01-18 11:41:09 +01:00
net: ieee802154: fix error return code in dgram_bind()
2022-11-03 23:56:54 +09:00
net/tunnel: wait until all sk_user_data reader finish before releasing the sock
2023-01-18 11:41:14 +01:00
ipv6: avoid use-after-free in ip6_fragment()
2022-12-14 11:30:48 +01:00
kcm: close race conditions on sk_receive_queue
2022-11-25 17:42:21 +01:00
af_key: Fix send_acquire race with pfkey_register
2022-12-08 11:22:57 +01:00
ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
2022-06-22 14:11:21 +02:00
l3mdev: l3mdev_master_upper_ifindex_by_index_rcu should be using netdev_master_upper_dev_get_rcu
2022-04-27 13:50:47 +02:00
wifi: mac80211: Fix ack frame idr leak when mesh has no route
2022-12-08 11:22:57 +01:00
mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
2022-12-14 11:30:45 +01:00
netfilter: conntrack: set icmpv6 redirects as RELATED
2023-01-18 11:41:08 +01:00
netlabel: fix out-of-bounds memory accesses
2022-04-15 14:18:35 +02:00
netlink: do not reset transport header in netlink_recvmsg()
2022-05-18 09:47:25 +02:00
NFC: nci: Bounds check struct nfc_target arrays
2022-12-14 11:30:46 +01:00
openvswitch: switch from WARN to pr_warn
2022-11-03 23:56:56 +09:00
packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
2022-12-08 11:23:03 +01:00
net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
2022-10-26 13:22:26 +02:00
rose: Fix NULL pointer dereference in rose_send_frame()
2022-11-10 17:57:51 +01:00
rxrpc: Fix ack.bufferSize to be 0 when generating an ack
2023-01-18 11:41:02 +01:00
net: sched: Fix use after free in red_enqueue()
2022-11-10 17:57:50 +01:00
sctp: fix memory leak in sctp_stream_outq_migrate()
2022-12-08 11:23:03 +01:00
net/smc: Remove redundant refcount increase
2022-09-15 12:04:50 +02:00
SUNRPC: Fix missing release socket in rpc_sockname()
2023-01-18 11:41:10 +01:00
tipc: Fix potential OOB in tipc_link_proto_rcv()
2022-12-14 11:30:47 +01:00
net/tls: Fix race in TLS device down flow
2022-07-29 17:14:12 +02:00
af_unix: Get user_ns from in_skb in unix_diag_get_exact().
2022-12-14 11:30:44 +01:00
net: vmw_vsock: vmci: Check memcpy_from_msg()
2023-01-18 11:41:13 +01:00
wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails
2023-01-18 11:41:08 +01:00
net/x25: Fix skb leak in x25_lapb_receive_frame()
2022-11-25 17:42:16 +01:00
xfrm: Update ipcomp_scratches with NULL when freed
2022-10-26 13:22:49 +02:00
net: Fix a data-race around sysctl_somaxconn.
2022-09-05 10:27:42 +02:00
203d604bd5