Jeremy Kerr 6c342ce223 mctp: serial: Cancel pending work from ndo_uninit handler ... We cannot do the cancel_work_sync from after the unregister_netdev, as the dev pointer is no longer valid, causing a uaf on ldisc unregister (or device close). Instead, do the cancel_work_sync from the ndo_uninit op, where the dev still exists, but the queue has stopped. Fixes: 7bd9890f3d ("mctp: serial: cancel tx work on ldisc close") Reported-by: Luo Likang <luolikang@nsfocus.com> Tested-by: Luo Likang <luolikang@nsfocus.com> Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au> Link: https://lore.kernel.org/r/20220211011552.1861886-1-jk@codeconstruct.com.au Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-02-11 14:39:54 -08:00
..
Kconfig	mctp: Add MCTP-over-serial transport binding	2021-11-23 11:47:51 +00:00
Makefile	mctp: Add MCTP-over-serial transport binding	2021-11-23 11:47:51 +00:00
mctp-serial.c	mctp: serial: Cancel pending work from ndo_uninit handler	2022-02-11 14:39:54 -08:00