In the function dvb_net_ule(), the pointer h.priv is not initialized.
When a ULE packet is received, the kernel crashes.
diff --git a/drivers/media/dvb-core/dvb_net.c
b/drivers/media/dvb-core/dvb_net.c
index 06b0dcc..abfa3e5 100644
--- a/drivers/media/dvb-core/dvb_net.c
+++ b/drivers/media/dvb-core/dvb_net.c
@@ -798,6 +798,7 @@ static void dvb_net_ule(struct net_device *dev,
const u8 *buf, size_t buf_len)
* For all TS cells in current buffer.
* Appearently, we are called for every single TS cell.
*/
+ h.priv = netdev_priv(dev);
for (h.ts = h.buf, h.ts_end = h.buf + h.buf_len;
h.ts < h.ts_end; /* no incr. */) {
if (h.new_ts) {