> -----Original Message----- > From: Intel-wired-lan <[email protected]> On Behalf Of > Maciej Fijalkowski > Sent: Wednesday, July 1, 2026 5:45 AM > To: [email protected] > Cc: [email protected]; Karlsson, Magnus <[email protected]>; > [email protected]; [email protected]; [email protected]; Kitszel, Przemyslaw > <[email protected]>; Keller, Jacob E <[email protected]>; > Fijalkowski, Maciej <[email protected]> > Subject: [Intel-wired-lan] [PATCH v5 net 5/7] i40e: fix potential UAF in > i40e_vsi_setup()'s error path > > Sashiko pointed out an issue where error path in i40e_vsi_reinit_setup() > released ring memory but then when freeing q_vectors, the rings mapped > to q_vectors where touched which implies a regular use-after-free bug. > > Apparently i40e_vsi_setup() has the same problem, so swap the allocation > and freeing order and fix the 13 year old bug. > > Fixes: 41c445ff0f48 ("i40e: main driver core") > Signed-off-by: Maciej Fijalkowski <[email protected]> > --- > drivers/net/ethernet/intel/i40e/i40e_main.c | 12 ++++++------ > 1 file changed, 6 insertions(+), 6 deletions(-)
Tested-by: Sunitha Mekala <[email protected]> (A Contingent worker at Intel)
