linux/drivers/char/ipmi
Dan Carpenter bfce073089 ipmi: fix use after free in _ipmi_destroy_user()
commit a92ce570c8 upstream.

The intf_free() function frees the "intf" pointer so we cannot
dereference it again on the next line.

Fixes: cbb79863fc ("ipmi: Don't allow device module unload when in use")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Message-Id: <Y3M8xa1drZv4CToE@kili>
Cc: <stable@vger.kernel.org> # 5.5+
Signed-off-by: Corey Minyard <cminyard@mvista.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-01-12 11:58:57 +01:00
..
Kconfig
Makefile
bt-bmc.c
ipmb_dev_int.c
ipmi_bt_sm.c
ipmi_devintf.c
ipmi_dmi.c
ipmi_dmi.h
ipmi_kcs_sm.c
ipmi_msghandler.c ipmi: fix use after free in _ipmi_destroy_user() 2023-01-12 11:58:57 +01:00
ipmi_plat_data.c
ipmi_plat_data.h
ipmi_powernv.c
ipmi_poweroff.c
ipmi_si.h
ipmi_si_hardcode.c
ipmi_si_hotmod.c
ipmi_si_intf.c ipmi: fix long wait in unload when IPMI disconnect 2023-01-12 11:58:57 +01:00
ipmi_si_mem_io.c
ipmi_si_parisc.c
ipmi_si_pci.c
ipmi_si_platform.c
ipmi_si_port_io.c
ipmi_si_sm.h
ipmi_smic_sm.c
ipmi_ssif.c
ipmi_watchdog.c
kcs_bmc.c
kcs_bmc.h
kcs_bmc_aspeed.c
kcs_bmc_cdev_ipmi.c
kcs_bmc_client.h
kcs_bmc_device.h
kcs_bmc_npcm7xx.c
kcs_bmc_serio.c