Merge pull request #26 from douzzer/20260427-null-after-free

20260427-null-after-free

Author: dgarske

kernel-src/device.c

@@ -471,12 +471,15 @@ static int wg_newlink(struct net *src_net, struct net_device *dev,
 err_free_tstats:
 #if LINUX_VERSION_CODE < KERNEL_VERSION(6, 9, 0)
 	free_percpu(dev->tstats);
+	dev->tstats = NULL;
 err_free_index_hashtable:
 #endif
 	kvfree(wg->index_hashtable);
+	wg->index_hashtable = NULL;
 err_free_peer_hashtable:
-        memzero_explicit(wg->peer_hashtable->key, sizeof wg->peer_hashtable->key);
+	memzero_explicit(wg->peer_hashtable->key, sizeof wg->peer_hashtable->key);
 	kvfree(wg->peer_hashtable);
+	wg->peer_hashtable = NULL;
 	WC_DEBUG_PR_NEG_RET(ret);
 }
 

kernel-src/ratelimiter.c

@@ -258,8 +258,10 @@ void wg_ratelimiter_uninit(void)
 	rcu_barrier();
 	memzero_explicit(key, sizeof key);
 	kvfree(table_v4);
+	table_v4 = NULL;
 #if IS_ENABLED(CONFIG_IPV6)
 	kvfree(table_v6);
+	table_v6 = NULL;
 #endif
 	kmem_cache_destroy(entry_cache);
 out: