)]}'
{
  "commit": "1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ff",
  "tree": "a69533ce4a72d67864f60836068515e76e3f7240",
  "parents": [
    "8b1f0af1fd5fd113432233ed8a3862ee7c30a84f"
  ],
  "author": {
    "name": "Xuanqiang Luo",
    "email": "luoxuanqiang@kylinos.cn",
    "time": "Mon Sep 28 16:04:23 2026 -0700"
  },
  "committer": {
    "name": "Jakub Kicinski",
    "email": "kuba@kernel.org",
    "time": "Fri Oct 02 13:38:08 2026 -0700"
  },
  "message": "ice: fix use-after-free in dynamic port cleanup\n\nice_dealloc_dynamic_port() uses dyn_port-\u003evsi-\u003eidx to erase the dynamic\nport from pf-\u003edyn_ports. However, it frees the VSI before reading the\nindex for the erase, resulting in a use-after-free.\n\nFollow the reverse of the allocation order in ice_alloc_dynamic_port()\nby erasing the xarray entry before freeing the VSI.\n\nFixes: eda69d654c7e (\"ice: add basic devlink subfunctions support\")\nCc: stable@vger.kernel.org\nSigned-off-by: Xuanqiang Luo \u003cluoxuanqiang@kylinos.cn\u003e\nReviewed-by: Marcin Szycik \u003cmarcin.szycik@linux.intel.com\u003e\nReviewed-by: Aleksandr Loktionov \u003caleksandr.loktionov@intel.com\u003e\nTested-by: Patryk Holda \u003cpatryk.holda@intel.com\u003e\nSigned-off-by: Tony Nguyen \u003canthony.l.nguyen@intel.com\u003e\nLink: https://patch.msgid.link/20260928230429.495442-3-anthony.l.nguyen@intel.com\nSigned-off-by: Jakub Kicinski \u003ckuba@kernel.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2a2e56777f9f7588d64cabaa53d7152f195d4e2b",
      "old_mode": 33188,
      "old_path": "drivers/net/ethernet/intel/ice/devlink/port.c",
      "new_id": "3ede2464900272bcd66b9773ec51e7dd2513c799",
      "new_mode": 33188,
      "new_path": "drivers/net/ethernet/intel/ice/devlink/port.c"
    }
  ]
}