On Mon, 14 Nov 2022 11:06:26 +0000, Wei Yongjun wrote:
> skb_share_check() already drop the reference of skb when return
> NULL, using kfree_skb() in the error handling path lead to skb
> double free.
>
> Fix it by remve the variable tmp_skb, and return directly when
> skb_share_check() return NULL.
>
> [...]
Applied to 6.7/scsi-fixes, thanks!
[1/1] scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
https://git.kernel.org/mkp/scsi/c/08c94d80b2da
--
Martin K. Petersen Oracle Linux Engineering
