]> www.infradead.org Git - users/hch/misc.git/commitdiff
net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
authorDan Carpenter <dan.carpenter@linaro.org>
Tue, 30 Sep 2025 12:25:01 +0000 (15:25 +0300)
committerJakub Kicinski <kuba@kernel.org>
Fri, 3 Oct 2025 17:20:20 +0000 (10:20 -0700)
Print "entry->mac" before freeing "entry".  The "entry" pointer is
freed with kfree_rcu() so it's unlikely that we would trigger this
in real life, but it's safer to re-order it.

Fixes: cc5387f7346a ("net/mlx4_en: Add unicast MAC filtering")
Signed-off-by: Dan Carpenter <dan.carpenter@linaro.org>
Reviewed-by: Tariq Toukan <tariqt@nvidia.com>
Link: https://patch.msgid.link/aNvMHX4g8RksFFvV@stanley.mountain
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
drivers/net/ethernet/mellanox/mlx4/en_netdev.c

index d2071aff7b8f3b1ac4d8c28a5b4786e32547dc5a..308b4458e0d445692a116d271fe9e5228414fdab 100644 (file)
@@ -1180,9 +1180,9 @@ static void mlx4_en_do_uc_filter(struct mlx4_en_priv *priv,
                                mlx4_unregister_mac(mdev->dev, priv->port, mac);
 
                                hlist_del_rcu(&entry->hlist);
-                               kfree_rcu(entry, rcu);
                                en_dbg(DRV, priv, "Removed MAC %pM on port:%d\n",
                                       entry->mac, priv->port);
+                               kfree_rcu(entry, rcu);
                                ++removed;
                        }
                }