[PATCH net-next 0/4] net: spacemit: A few minor/theoretical fixes

Vivian Wang wangruikang at iscas.ac.cn
Tue Mar 3 01:24:17 PST 2026


Recently a user reported a supposed UAF/double-free in this driver. It
turned out to be a false positive (ugh) from a bug with riscv's
kfence_protect_page() [1], but it did also prompt me to review the
driver code yet again. These are some fixes for minor/theoretical
problems I've found.

[1]: https://lore.kernel.org/r/20260303-handle-kfence-protect-spurious-fault-v2-0-f80d8354d79d@iscas.ac.cn/

---
Vivian Wang (4):
      net: spacemit: Remove unused buff_addr fields
      net: spacemit: Fix error handling in emac_alloc_rx_desc_buffers()
      net: spacemit: Fix error handling in emac_tx_mem_map()
      net: spacemit: Free rings of memory after unmapping DMA

 drivers/net/ethernet/spacemit/k1_emac.c | 34 ++++++++++++++++++---------------
 1 file changed, 19 insertions(+), 15 deletions(-)
---
base-commit: 6de23f81a5e08be8fbf5e8d7e9febc72a5b5f27f
change-id: 20260303-k1-ethernet-more-fixes-1829c3717cfe

Best regards,
-- 
Vivian "dramforever" Wang




More information about the linux-riscv mailing list