[PATCH net v2] net: airoha: fix potential use-after-free in airoha_npu_get()

Andrew Lunn andrew at lunn.ch
Tue Jul 15 09:23:11 PDT 2025


On Tue, Jul 15, 2025 at 07:30:58AM -0700, Alok Tiwari wrote:
> np->name was being used after calling of_node_put(np), which
> releases the node and can lead to a use-after-free bug.
> Previously, of_node_put(np) was called unconditionally after
> of_find_device_by_node(np), which could result in a use-after-free if
> pdev is NULL.
> 
> This patch moves of_node_put(np) after the error check to ensure
> the node is only released after both the error and success cases
> are handled appropriately, preventing potential resource issues.
> 
> Fixes: 23290c7bc190 ("net: airoha: Introduce Airoha NPU support")
> Signed-off-by: Alok Tiwari <alok.a.tiwari at oracle.com>

Reviewed-by: Andrew Lunn <andrew at lunn.ch>

    Andrew



More information about the Linux-mediatek mailing list