| commit | 7fd25e6fc035f4b04b75bca6d7e8daa069603a76 | [log] [tgz] |
|---|---|---|
| author | Johan Hovold <johan@kernel.org> | Thu Sep 19 14:12:34 2019 +0200 |
| committer | Stefan Schmidt <stefan@datenfreihafen.org> | Thu Sep 19 16:17:57 2019 +0200 |
| tree | de38167115834700c8622e7ec512d90f3c6174fb | |
| parent | f53a7ad189594a112167efaf17ea8d0242b5ac00 [diff] |
ieee802154: atusb: fix use-after-free at disconnect
The disconnect callback was accessing the hardware-descriptor private
data after having having freed it.
Fixes: 7490b008d123 ("ieee802154: add support for atusb transceiver")
Cc: stable <stable@vger.kernel.org> # 4.2
Cc: Alexander Aring <alex.aring@gmail.com>
Reported-by: syzbot+f4509a9138a1472e7e80@syzkaller.appspotmail.com
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Stefan Schmidt <stefan@datenfreihafen.org>