Re: [PATCH net v2] net: usb: ipheth: fix carrier_work UAF on disconnect
[email protected] Thu, 06 Aug 2026 15:50:22 +0000
| Newsgroups | org.kernel.vger.linux-usb,org.kernel.vger.linux-kernel,org.kernel.vger.netdev,org.kernel.vger.stable |
|---|---|
| Message-ID | <178603142291.1348318.12761684225975520681.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>: On Sun, 2 Aug 2026 14:06:02 +0200 you wrote: > ipheth_sndbulk_callback() re-arms the carrier-check work on any > non-zero URB status: > > else > schedule_delayed_work(&dev->carrier_work, 0); > > Nothing ties that to the interface being up, so the work can be armed > again after ipheth_close() has already drained it, and stay armed > until the netdev whose private area embeds it is freed. > > [...] Here is the summary with links: - [net,v2] net: usb: ipheth: fix carrier_work UAF on disconnect https://git.kernel.org/netdev/net/c/fde39b8a5217 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html