Pan Bian <bianpan2...@163.com> wrote: > entry is released via usb_put_urb just after calling usb_submit_urb. > However, entry is used if the submission fails, resulting in a use after > free bug. The patch fixes this. > > Signed-off-by: Pan Bian <bianpan2...@163.com> > ACKed-by: Larry Finger <larry.fin...@lwfinger.net>
Patch applied to wireless-drivers-next.git, thanks. afbb1947db94 rtl818x: fix potential use after free -- https://patchwork.kernel.org/patch/10704331/ https://wireless.wiki.kernel.org/en/developers/documentation/submittingpatches