With the recent removal of vm_dev from devres its memory is only freed via the callback virtio_mmio_release_dev. However, this only takes effect after device_add is called by register_virtio_device. Until then it's an unmanaged resource and must be explicitly freed on error exit. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Additional info: 社区有patch已经解决 llc: verify mac len before reading mac header commit f2c0b571a5fc511daf23c060e7a9c1c502069a06 Reference:https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.10.y&id=f2c0b571a5fc511daf23c060e7a9c1c502069a06 git cherry-pick -s f2c0b571a5(with stable-v5.10.201 repo added)
The PR Link: https://gitee.com/anolis/cloud-kernel/pulls/2461
(In reply to 小龙 from comment #1) > The PR Link: https://gitee.com/anolis/cloud-kernel/pulls/2461 merged
The PR is problematic and fixed in a new one: https://gitee.com/anolis/cloud-kernel/pulls/2487