Re: [PATCH] ravb: Fix use-after-free ravb_tstamp_skb

From: Simon Horman Date: Fri, 16 Aug 2019 17:17:02 +0200 > From: Tho Vu > > When a Tx timestamp is requested, a pointer to the skb is stored in the > ravb_tstamp_skb struct. This was done without an skb_get. There exists > the possibility that the skb could be freed by ravb_tx_free (when > ravb

[PATCH] ravb: Fix use-after-free ravb_tstamp_skb

From: Tho Vu When a Tx timestamp is requested, a pointer to the skb is stored in the ravb_tstamp_skb struct. This was done without an skb_get. There exists the possibility that the skb could be freed by ravb_tx_free (when ravb_tx_free is called from ravb_start_xmit) before the timestamp was proce