Dan Carpenter f7fde44119 ipmi: fix use after free in _ipmi_destroy_user() ... commit a92ce570c8 upstream. The intf_free() function frees the "intf" pointer so we cannot dereference it again on the next line. Fixes: cbb79863fc ("ipmi: Don't allow device module unload when in use") Signed-off-by: Dan Carpenter <error27@gmail.com> Message-Id: <Y3M8xa1drZv4CToE@kili> Cc: <stable@vger.kernel.org> # 5.5+ Signed-off-by: Corey Minyard <cminyard@mvista.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-01-07 11:15:56 +01:00
..
Kconfig	ipmi: ipmb: fix dependencies to eliminate build error	2021-10-14 11:17:18 -05:00
Makefile	ipmi:ipmb: Add initial support for IPMI over IPMB	2021-10-05 06:54:17 -05:00
bt-bmc.c	ipmi: bt: Add ast2600 compatible string	2021-10-07 14:02:45 -05:00
ipmb_dev_int.c	ipmi: use simple i2c probe function	2022-05-12 10:00:03 -05:00
ipmi_bt_sm.c	ipmi: Clean up some printks	2020-09-15 09:57:45 -05:00
ipmi_devintf.c	ipmi:devintf: Return a proper error when recv buffer too small	2021-10-05 06:54:16 -05:00
ipmi_dmi.c	ipmi_si: Rework some include files	2019-08-02 07:25:03 -05:00
ipmi_dmi.h	ipmi_si: Rework some include files	2019-08-02 07:25:03 -05:00
ipmi_ipmb.c	ipmi:ipmb: Fix refcount leak in ipmi_ipmb_probe	2022-05-12 10:00:04 -05:00
ipmi_kcs_sm.c	ipmi: Clean up some printks	2020-09-15 09:57:45 -05:00
ipmi_msghandler.c	ipmi: fix use after free in _ipmi_destroy_user()	2023-01-07 11:15:56 +01:00
ipmi_plat_data.c	ipmi: Handle device properties with software node API	2021-03-10 19:00:02 -06:00
ipmi_plat_data.h	ipmi: Add the i2c-addr property for SSIF interfaces	2019-04-24 09:02:53 -05:00
ipmi_powernv.c	ipmi:powernv: Convert ipmi_smi_t to struct ipmi_smi	2018-09-18 16:15:33 -05:00
ipmi_poweroff.c	ipmi: Add an intializer for ipmi_recv_msg struct	2022-05-12 10:00:03 -05:00
ipmi_si.h	parisc: Make struct parisc_driver::remove() return void	2021-08-30 10:18:25 +02:00
ipmi_si_hardcode.c	ipmi_si: Join string literals back	2021-04-02 12:53:42 -05:00
ipmi_si_hotmod.c	ipmi_si: Join string literals back	2021-04-02 12:53:42 -05:00
ipmi_si_intf.c	ipmi: fix long wait in unload when IPMI disconnect	2023-01-07 11:15:55 +01:00
ipmi_si_mem_io.c	ipmi_si: Rework some include files	2019-08-02 07:25:03 -05:00
ipmi_si_parisc.c	parisc: Make struct parisc_driver::remove() return void	2021-08-30 10:18:25 +02:00
ipmi_si_pci.c	ipmi_si: Join string literals back	2021-04-02 12:53:42 -05:00
ipmi_si_platform.c	parisc: Make struct parisc_driver::remove() return void	2021-08-30 10:18:25 +02:00
ipmi_si_port_io.c	ipmi_si: Rework some include files	2019-08-02 07:25:03 -05:00
ipmi_si_sm.h	ipmi_si: Rework some include files	2019-08-02 07:25:03 -05:00
ipmi_smic_sm.c	ipmi: Clean up some printks	2020-09-15 09:57:45 -05:00
ipmi_ssif.c	ipmi: remove unnecessary type castings	2022-05-12 10:00:04 -05:00
ipmi_watchdog.c	ipmi: Add an intializer for ipmi_recv_msg struct	2022-05-12 10:00:03 -05:00
kcs_bmc.c	ipmi: kcs_bmc: Enable IBF on open	2021-06-21 19:50:28 -05:00
kcs_bmc.h	ipmi: kcs_bmc: Allow clients to control KCS IRQ state	2021-06-21 19:50:28 -05:00
kcs_bmc_aspeed.c	ipmi: kcs: Poll OBF briefly to reduce OBE latency	2022-12-31 13:25:50 +01:00
kcs_bmc_cdev_ipmi.c	ipmi: kcs_bmc: Decouple the IPMI chardev from the core	2021-06-21 19:50:22 -05:00
kcs_bmc_client.h	ipmi: kcs_bmc: Allow clients to control KCS IRQ state	2021-06-21 19:50:28 -05:00
kcs_bmc_device.h	ipmi: kcs_bmc: Allow clients to control KCS IRQ state	2021-06-21 19:50:28 -05:00
kcs_bmc_npcm7xx.c	ipmi: kcs_bmc: Enable IBF on open	2021-06-21 19:50:28 -05:00
kcs_bmc_serio.c	ipmi: kcs_bmc: Fix a memory leak in the error handling path of 'kcs_bmc_serio_add_device()'	2021-10-29 07:23:59 -05:00