Yoshihiro Shimoda 044e7097e8 net: renesas: sh_eth: Fix freeing wrong tx descriptor ...

[ Upstream commit 0341d5e3d1 ]

The cur_tx counter must be incremented after TACT bit of
txdesc->status was set. However, a CPU is possible to reorder
instructions and/or memory accesses between cur_tx and
txdesc->status. And then, if TX interrupt happened at such a
timing, the sh_eth_tx_free() may free the descriptor wrongly.
So, add wmb() before cur_tx++.
Otherwise NETDEV WATCHDOG timeout is possible to happen.

Fixes: 86a74ff21a ("net: sh_eth: add support for Renesas SuperH Ethernet")
Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@renesas.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-09-22 11:48:14 +02:00

..

appletalk

net: appletalk: cops: Fix data race in cops_probe1

2021-06-16 11:54:58 +02:00

arcnet

arcnet: provide a buffer big enough to actually receive packets

2019-10-05 13:09:26 +02:00

bonding

bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()

2021-09-22 11:48:05 +02:00

caif

net: caif: fix memory leak in ldisc_open

2021-06-30 08:48:31 -04:00

can

can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters

2021-09-03 09:58:00 +02:00

dsa

net: dsa: b53: Fix calculating number of switch ports

2021-09-22 11:48:14 +02:00

ethernet

net: renesas: sh_eth: Fix freeing wrong tx descriptor

2021-09-22 11:48:14 +02:00

fddi

FDDI: defxx: Make MMIO the configuration default except for EISA

2021-05-22 10:59:47 +02:00

fjes

fjes: check return value after calling platform_get_resource()

2021-07-20 16:16:00 +02:00

hamradio

net: 6pack: fix slab-out-of-bounds in decode_data

2021-08-26 08:36:46 -04:00

hippi

hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path

2020-07-29 10:16:48 +02:00

hyperv

hv_netvsc: Remove "unlikely" from netvsc_select_queue

2020-09-23 12:10:57 +02:00

ieee802154

ieee802154: hwsim: fix GPF in hwsim_new_edge_nl

2021-08-26 08:36:37 -04:00

ipvlan

ipvlan: fix device features

2020-09-03 11:24:17 +02:00

netdevsim

Merge ra.kernel.org:/pub/scm/linux/kernel/git/davem/net

2018-08-02 10:55:32 -07:00

phy

ptp: dp83640: don't define PAGE0

2021-09-22 11:48:11 +02:00

plip

…

ppp

ppp: Fix generating ifname when empty IFLA_IFNAME is specified

2021-08-26 08:36:38 -04:00

slip

slip: not call free_netdev before rtnl_unlock in slip_open

2020-03-20 11:55:54 +01:00

team

team: protect features update by RCU to avoid deadlock

2021-02-03 23:23:27 +01:00

usb

net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920

2021-09-22 11:48:13 +02:00

vmxnet3

net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()

2020-06-22 09:05:12 +02:00

wan

net: lapbether: Prevent racing when checking whether the netif is running

2021-05-22 10:59:34 +02:00

wimax

staging: wimax/i2400m: fix byte-order issue

2021-05-22 10:59:14 +02:00

wireless

ath9k: fix sleeping in atomic context

2021-09-22 11:48:09 +02:00

xen-netback

xen-netback: Check for hotplug-status existence before watching

2021-04-28 13:16:52 +02:00

dummy.c

net: Do not take net_rwsem in __rtnl_link_unregister()

2018-03-31 22:24:58 -04:00

eql.c

…

geneve.c

net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb

2021-05-22 10:59:38 +02:00

gtp.c

net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending

2021-03-04 09:39:59 +01:00

ifb.c

ifb: fix packets checksum

2018-05-28 23:02:22 -04:00

Kconfig

geneve: change NET_UDP_TUNNEL dependency to select

2019-12-05 09:21:10 +01:00

LICENSE.SRC

…

loopback.c

net: loopback: clear skb->tstamp before netif_rx()

2018-11-13 11:08:20 -08:00

macsec.c

macsec: avoid use-after-free in macsec_handle_frame()

2020-10-14 10:31:23 +02:00

macvlan.c

macvlan: validate setting of multiple remote source MAC addresses

2020-09-03 11:24:26 +02:00

macvtap.c

…

Makefile

net: Always descend into dsa/

2019-05-25 18:23:19 +02:00

mdio.c

…

mii.c

…

net_failover.c

net_failover: fixed rollback in net_failover_open()

2020-06-22 09:04:58 +02:00

netconsole.c

…

nlmon.c

…

ntb_netdev.c

ntb_netdev: fix sleep time mismatch

2019-12-01 09:17:13 +01:00

rionet.c

rapidio/rionet: do not free skb before reading its length

2018-12-05 19:31:59 +01:00

sb1000.c

…

Space.c

net/mac89x0: Convert to platform_driver

2018-03-01 21:21:36 -05:00

sungem_phy.c

…

tap.c

net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds vlan

2018-06-07 16:15:38 -04:00

thunderbolt.c

net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending

2019-06-15 11:54:07 +02:00

tun.c

net: tun: set tun->dev->addr_len during TUNSETLINK processing

2021-04-14 08:22:36 +02:00

veth.c

veth: Store queue_mapping independently of XDP prog presence

2021-03-30 14:37:00 +02:00

virtio_net.c

virtio_net: Do not pull payload in skb->head

2021-08-04 12:23:44 +02:00

vrf.c

vrf: Fix fast path output packet handling with async Netfilter rules

2020-11-18 19:18:52 +01:00

vsockmon.c

…

vxlan.c

vxlan: add missing rcu_read_lock() in neigh_reduce()

2021-07-20 16:15:51 +02:00

xen-netfront.c

xen-netfront: fix potential deadlock in xennet_remove()

2020-08-05 10:06:05 +02:00