linux-stable/net
Yang Yingliang 776e8379f5 Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()
[ Upstream commit 0ba18967d4 ]

It is not allowed to call kfree_skb() from hardware interrupt
context or with interrupts being disabled. So replace kfree_skb()
with dev_kfree_skb_irq() under spin_lock_irqsave().

Fixes: 81be03e026 ("Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg")
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-01-18 09:26:20 +01:00
..
6lowpan
9p net/9p: Fix a potential socket leak in p9_socket_open 2022-12-08 11:16:32 +01:00
802 net/802/garp: fix memleak in garp_request_join() 2021-08-04 12:22:14 +02:00
8021q
appletalk
atm net/atm: fix proc_mpc_write incorrect return value 2022-11-03 23:50:51 +09:00
ax25 ax25: Fix UAF bugs in ax25 timers 2022-04-27 13:15:32 +02:00
batman-adv batman-adv: Don't skb_split skbuffs with frag_list 2022-05-18 09:18:05 +02:00
bluetooth Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() 2023-01-18 09:26:20 +01:00
bpf bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() 2022-11-25 17:36:54 +01:00
bridge netfilter: ebtables: fix memory leak when blob is malformed 2022-09-28 10:56:51 +02:00
caif net: caif: fix double disconnect client in chnl_net_open() 2022-11-25 17:36:50 +01:00
can can: bcm: check the result of can_send() in bcm_can_tx() 2022-10-26 13:17:10 +02:00
ceph
core net: gso: fix panic on frag_list with mixed head alloc types 2022-11-25 17:36:44 +01:00
dcb net: dcb: disable softirqs in dcbnl_flush_dev() 2022-03-08 19:01:58 +01:00
dccp dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). 2022-12-08 11:16:30 +01:00
decnet net: decnet: Fix sleeping inside in af_decnet 2021-07-28 11:12:18 +02:00
dns_resolver
dsa
ethernet
hsr net: hsr: Fix potential use-after-free 2022-12-08 11:16:32 +01:00
ieee802154 net: ieee802154: fix error return code in dgram_bind() 2022-11-03 23:50:54 +09:00
ife
ipv4 net/tunnel: wait until all sk_user_data reader finish before releasing the sock 2023-01-18 09:26:19 +01:00
ipv6 ipv6: avoid use-after-free in ip6_fragment() 2022-12-14 11:26:15 +01:00
ipx
iucv
kcm kcm: close race conditions on sk_receive_queue 2022-11-25 17:36:54 +01:00
key af_key: Fix send_acquire race with pfkey_register 2022-12-08 11:16:29 +01:00
l2tp l2tp: fix race in pppol2tp_release with session object destroy 2022-06-25 11:46:45 +02:00
l3mdev
lapb
llc llc: only change llc->dev when bind() succeeds 2022-03-28 08:22:27 +02:00
mac80211 wifi: mac80211: Fix ack frame idr leak when mesh has no route 2022-12-08 11:16:29 +01:00
mac802154 mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() 2022-12-14 11:26:14 +01:00
mpls net: mpls: Fix notifications when deleting a device 2021-12-08 08:46:55 +01:00
ncsi net/ncsi: Avoid GFP_KERNEL in response handler 2021-04-16 11:57:51 +02:00
netfilter ipvs: use explicitly signed chars 2022-11-10 15:47:21 +01:00
netlabel net: fix NULL pointer reference in cipso_v4_doi_free 2021-09-22 11:45:32 +02:00
netlink netlink: do not reset transport header in netlink_recvmsg() 2022-05-18 09:18:05 +02:00
netrom netrom: Decrease sock refcount when sock timers expire 2021-07-28 11:12:18 +02:00
nfc NFC: nci: Bounds check struct nfc_target arrays 2022-12-14 11:26:14 +01:00
nsh
openvswitch openvswitch: switch from WARN to pr_warn 2022-11-03 23:50:57 +09:00
packet packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE 2022-12-08 11:16:32 +01:00
phonet phonet: refcount leak in pep_sock_accep 2022-01-11 13:57:37 +01:00
psample
qrtr
rds net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() 2022-10-26 13:17:00 +02:00
rfkill
rose rose: Fix NULL pointer dereference in rose_send_frame() 2022-11-10 15:47:21 +01:00
rxrpc rxrpc: Don't try to resend the request if we're receiving the reply 2022-06-14 16:53:50 +02:00
sched net: sched: Fix use after free in red_enqueue() 2022-11-10 15:47:20 +01:00
sctp sctp: read sk->sk_bound_dev_if once in sctp_rcv() 2022-06-14 16:53:50 +02:00
smc net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending 2022-05-18 09:18:06 +02:00
strparser
sunrpc SUNRPC: Fix missing release socket in rpc_sockname() 2023-01-18 09:26:16 +01:00
switchdev
tipc tipc: Fix potential OOB in tipc_link_proto_rcv() 2022-12-14 11:26:15 +01:00
tls
unix af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress 2022-01-27 09:01:00 +01:00
vmw_vsock net: vmw_vsock: vmci: Check memcpy_from_msg() 2023-01-18 09:26:18 +01:00
wimax
wireless wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() 2022-09-15 12:23:49 +02:00
x25 net/x25: Fix skb leak in x25_lapb_receive_frame() 2022-11-25 17:36:51 +01:00
xfrm xfrm: Update ipcomp_scratches with NULL when freed 2022-10-26 13:17:09 +02:00
compat.c net: Return the correct errno code 2021-06-30 08:48:47 -04:00
Kconfig
Makefile net: split out functions related to registering inflight socket files 2021-08-04 12:22:14 +02:00
socket.c net: Fix a data-race around sysctl_somaxconn. 2022-09-05 10:25:04 +02:00
sysctl_net.c