Re: [PATCH net] net: atm: fix use after free in lec_send()
From: Simon Horman <horms@kernel.org>
Date: 2025-03-19 12:39:28
Also in:
kernel-janitors, lkml
On Fri, Mar 14, 2025 at 01:10:57PM +0300, Dan Carpenter wrote:
The ->send() operation frees skb so save the length before calling
->send() to avoid a use after free.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Dan Carpenter <redacted>Reviewed-by: Simon Horman <horms@kernel.org>