Oliver Hartkopp ef56cc8889 can: raw: add missing refcount for memory leak fix ... commit c275a176e4 upstream. Commit ee8b94c851 ("can: raw: fix receiver memory leak") introduced a new reference to the CAN netdevice that has assigned CAN filters. But this new ro->dev reference did not maintain its own refcount which lead to another KASAN use-after-free splat found by Eric Dumazet. This patch ensures a proper refcount for the CAN nedevice. Fixes: ee8b94c851 ("can: raw: fix receiver memory leak") Reported-by: Eric Dumazet <edumazet@google.com> Cc: Ziyang Xuan <william.xuanziyang@huawei.com> Signed-off-by: Oliver Hartkopp <socketcan@hartkopp.net> Link: https://lore.kernel.org/r/20230821144547.6658-3-socketcan@hartkopp.net Signed-off-by: Jakub Kicinski <kuba@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-08-30 16:18:20 +02:00
..
j1939	can: j1939: avoid possible use-after-free when j1939_can_rx_register fails	2023-06-14 11:13:06 +02:00
af_can.c	can: af_can: fix NULL pointer dereference in can_rcv_filter	2022-12-14 11:37:22 +01:00
af_can.h	can: introduce CAN midlayer private and allocate it automatically	2019-09-04 13:29:14 +02:00
bcm.c	can: bcm: Fix UAF in bcm_proc_show()	2023-07-27 08:46:55 +02:00
gw.c	can: gw: synchronize rcu operations before removing gw job entry	2021-06-19 23:53:43 +02:00
isotp.c	can: isotp: isotp_sendmsg(): fix return error fix on TX path	2023-07-05 18:25:05 +01:00
Kconfig	net: remove redundant 'depends on NET'	2021-01-27 17:04:12 -08:00
Makefile	can: add ISO 15765-2:2016 transport protocol	2020-10-07 23:18:33 +02:00
proc.c	can: proc: remove unnecessary variables	2021-05-27 09:42:21 +02:00
raw.c	can: raw: add missing refcount for memory leak fix	2023-08-30 16:18:20 +02:00