From 4b7fd2e688d51f8ed7380758047fcaa4d4693d47 Mon Sep 17 00:00:00 2001 From: "Michael S. Tsirkin" Date: Wed, 15 Oct 2014 16:23:28 +0300 Subject: [PATCH] virtio_net: fix use after free commit 0b725a2ca61bedc33a2a63d0451d528b268cf975 net: Remove ndo_xmit_flush netdev operation, use signalling instead. added code that looks at skb->xmit_more after the skb has been put in TX VQ. Since some paths process the ring and free the skb immediately, this can cause use after free. Fix by storing xmit_more in a local variable. Cc: David S. Miller Signed-off-by: Michael S. Tsirkin Signed-off-by: David S. Miller --- Reading git-format-patch failed