• Marek Behún's avatar
    net: phy: marvell10g: fix null pointer dereference · 1b8ef142
    Marek Behún authored
    Commit c3e302ed ("net: phy: marvell10g: fix temperature sensor on 2110")
    added a check for PHY ID via phydev->drv->phy_id in a function which is
    called by devres at a time when phydev->drv is already set to null by
    phy_remove function.
    
    This null pointer dereference can be triggered via SFP subsystem with a
    SFP module containing this Marvell PHY. When the SFP interface is put
    down, the SFP subsystem removes the PHY.
    
    Fixes: c3e302ed ("net: phy: marvell10g: fix temperature sensor on 2110")
    Signed-off-by: default avatarMarek Behún <marek.behun@nic.cz>
    Cc: Maxime Chevallier <maxime.chevallier@bootlin.com>
    Cc: Andrew Lunn <andrew@lunn.ch>
    Cc: Baruch Siach <baruch@tkos.co.il>
    Cc: Russell King <rmk+kernel@armlinux.org.uk>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    1b8ef142
marvell10g.c 19.4 KB