Re: [PATCH] RDMA/core: Fix use-after-free in ib_get_eth_speed()

On Fri, Aug 21, 2026 at 12:37 PM Eric Dumazet <[email protected]> wrote:
>
> In ib_get_eth_speed(), dev_put(netdev) is called before inspecting
> rc and dereferencing netdev->name in pr_warn(). If dev_put() drops
> the final reference to netdev, netdev->name accesses freed memory.
>
> Move dev_put(netdev) after the warning block so netdev is kept
> alive while its name is read.
>
> Fixes: d41861942fc5 ("IB/core: Add generic function to extract IB speed from netdev")
> Signed-off-by: Eric Dumazet <[email protected]>

Reviewed-by: Kalesh AP <[email protected]>

-- 
Regards,
Kalesh AP