Re: [EXT] [PATCH] atlantic: fix double-free in aq_ring_tx_clean

From: Igor Russkikh
Date: Fri Nov 19 2021 - 02:40:07 EST

> We found this bug while fuzzing the device driver. Using and freeing
> the dangling pointer buff->skb would cause use-after-free and
> double-free.
> This bug is triggerable with compromised/malfunctioning devices. We
> found the bug with QEMU emulation and tested the patch by emulation.
> We did NOT test on a real device.
> Attached is the bug report.

Reviewed-by: Igor Russkikh <irusskikh@xxxxxxxxxxx>

Thank you for submitting this!