Skip to content

Commit a0ffa68

Browse files
Eddie JamesPaolo Abeni
authored andcommitted
net/ncsi: Disable the ncsi work before freeing the associated structure
The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic. Fixes: 2d283bd ("net/ncsi: Resource management") Signed-off-by: Eddie James <[email protected]> Link: https://patch.msgid.link/[email protected] Signed-off-by: Paolo Abeni <[email protected]>
1 parent fa7dfea commit a0ffa68

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

net/ncsi/ncsi-manage.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1954,6 +1954,8 @@ void ncsi_unregister_dev(struct ncsi_dev *nd)
19541954
list_del_rcu(&ndp->node);
19551955
spin_unlock_irqrestore(&ncsi_dev_lock, flags);
19561956

1957+
disable_work_sync(&ndp->work);
1958+
19571959
kfree(ndp);
19581960
}
19591961
EXPORT_SYMBOL_GPL(ncsi_unregister_dev);

0 commit comments

Comments
 (0)