Oliver Neukum d8b1386e6b media: dvb: usb: fix use after free in dvb_usb_device_exit ...

[ Upstream commit 6cf97230cd5f36b7665099083272595c55d72be7 ]

dvb_usb_device_exit() frees and uses the device name in that order.
Fix by storing the name in a buffer before freeing it.

Signed-off-by: Oliver Neukum <oneukum@suse.com>
Reported-by: syzbot+26ec41e9f788b3eba396@syzkaller.appspotmail.com
Signed-off-by: Sean Young <sean@mess.org>
Signed-off-by: Mauro Carvalho Chehab <mchehab+samsung@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
CVE-2019-15213
Signed-off-by: Kevin F. Haggerty <haggertk@lineageos.org>
Change-Id: Ia218933795b4847765450522202d1b67e326c3cd

2020-05-20 09:44:22 +02:00

..

b2c2

…

bt8xx

…

ddbridge

…

dm1105

…

dvb-core

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

dvb-usb

media: dvb: usb: fix use after free in dvb_usb_device_exit

2020-05-20 09:44:22 +02:00

firewire

…

frontends

…

mantis

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

ngene

…

pluto2

…

pt1

…

siano

Merge tag 'v3.4.113' into lineage-16.0

2019-08-05 14:20:47 +02:00

ttpci

…

ttusb-budget

…

ttusb-dec

…

Kconfig

misc: Import SM-G900H kernel source code

2019-08-02 15:14:10 +02:00

Makefile

…