Description: Use-after-free in iw_cxgb3 References: http://www.openwall.com/lists/oss-security/2016/02/11/1 Notes: Introduced in 04b5d028f50ff05a8f9ae049ee71f8fdfcf1f5de (v2.6.30-rc2). Partially fixed in 2.6.35 with 73a203d2014f50d874b9e40083ad481ca70408e8. Bugs: upstream: released (4.5-rc1) [67f1aee6f45059fd6b0f5b0ecb2c97ad0451f6b3] 3.16-upstream-stable: released (3.16.7-ckt25) 3.2-upstream-stable: released (3.2.78) [iw_cxgb3-fix-incorrectly-returning-error-on-success.patch] 2.6.32-upstream-stable: released (2.6.32.71) sid: released (4.4.2-1) [bugfix/all/iw_cxgb3-Fix-incorrectly-returning-error-on-success.patch] 3.16-jessie-security: released (3.16.7-ckt20-1+deb8u4) [bugfix/all/iw_cxgb3-Fix-incorrectly-returning-error-on-success.patch] 3.2-wheezy-security: released (3.2.73-2+deb7u3) [bugfix/all/iw_cxgb3-Fix-incorrectly-returning-error-on-success.patch] 2.6.32-squeeze-security: released (2.6.32-48squeeze20) [bugfix/all/rdma-cxgb3-don-t-free-skbs-on-net_xmit_-indications-.patch, bugfix/all/iw_cxgb3-Fix-incorrectly-returning-error-on-success.patch]