Messages in this thread | | | From | Brian Norris <> | Date | Wed, 20 May 2020 13:59:20 -0700 | Subject | Re: [PATCH] ath9k: release allocated buffer if timed out |
| |
On Wed, May 13, 2020 at 12:02 PM Brian Norris <briannorris@chromium.org> wrote: > > On Wed, May 13, 2020 at 12:05 AM Kalle Valo <kvalo@codeaurora.org> wrote: > > Actually it's already reverted in -next, nobody just realised that it's > > a regression from commit 728c1e2a05e4: > > > > ced21a4c726b ath9k: Fix use-after-free Read in htc_connect_service > > Nice. > > > v5.8-rc1 should be the first release having the fix. > > So I guess we have to wait until 5.8-rc1 (when this lands in mainline) > to send this manually to stable@vger.kernel.org?
For the record, there are more reports of this, if I'm reading them right:
https://bugzilla.kernel.org/show_bug.cgi?id=207797
| |