2
0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2025-09-04 20:19:47 +08:00
linux/drivers/infiniband/hw/erdma
Cheng Xu 8343768924 RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
After the erdma_cep_put(new_cep) being called, new_cep will be freed,
and the following dereference will cause a UAF problem. Fix this issue.

Fixes: 920d93eac8 ("RDMA/erdma: Add connection management (CM) support")
Signed-off-by: Markus Elfring <elfring@users.sourceforge.net>
Signed-off-by: Cheng Xu <chengyou@linux.alibaba.com>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
2025-03-06 08:25:38 -05:00
..
erdma_cm.c RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() 2025-03-06 08:25:38 -05:00
erdma_cm.h RDMA/erdma: Unify byte ordering APIs usage 2023-03-22 13:10:46 +02:00
erdma_cmdq.c RDMA/erdma: Support non-sleeping erdma_post_cmd_wait() 2024-12-30 13:42:52 -05:00
erdma_cq.c RDMA/erdma: Support UD QPs and UD WRs 2024-12-16 08:20:05 -05:00
erdma_eq.c RDMA/erdma: Support non-sleeping erdma_post_cmd_wait() 2024-12-30 13:42:52 -05:00
erdma_hw.h RDMA/erdma: Support UD QPs and UD WRs 2024-12-16 08:20:05 -05:00
erdma_main.c RDMA/erdma: Support non-sleeping erdma_post_cmd_wait() 2024-12-30 13:42:52 -05:00
erdma_qp.c RDMA/erdma: Support non-sleeping erdma_post_cmd_wait() 2024-12-30 13:42:52 -05:00
erdma_verbs.c RDMA/erdma: Support create_ah/destroy_ah in non-sleepable contexts 2024-12-30 13:42:52 -05:00
erdma_verbs.h RDMA/erdma: Refactor the code of the modify_qp interface 2024-12-16 08:20:05 -05:00
erdma.h RDMA/erdma: Support non-sleeping erdma_post_cmd_wait() 2024-12-30 13:42:52 -05:00
Kconfig RDMA/erdma: Probe the erdma RoCEv2 device 2024-12-16 08:20:05 -05:00
Makefile RDMA/erdma: Add driver to kernel build environment 2022-07-27 16:04:05 -03:00