[PATCH net v2] net: airoha: fix potential use-after-free in airoha_npu_get()
Andrew Lunn
andrew at lunn.ch
Tue Jul 15 09:23:11 PDT 2025
On Tue, Jul 15, 2025 at 07:30:58AM -0700, Alok Tiwari wrote:
> np->name was being used after calling of_node_put(np), which
> releases the node and can lead to a use-after-free bug.
> Previously, of_node_put(np) was called unconditionally after
> of_find_device_by_node(np), which could result in a use-after-free if
> pdev is NULL.
>
> This patch moves of_node_put(np) after the error check to ensure
> the node is only released after both the error and success cases
> are handled appropriately, preventing potential resource issues.
>
> Fixes: 23290c7bc190 ("net: airoha: Introduce Airoha NPU support")
> Signed-off-by: Alok Tiwari <alok.a.tiwari at oracle.com>
Reviewed-by: Andrew Lunn <andrew at lunn.ch>
Andrew
More information about the Linux-mediatek
mailing list