diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2018-01-06 01:26:00 +0100 |
|---|---|---|
| committer | Jens Axboe <axboe@kernel.dk> | 2018-01-06 17:32:07 +0100 |
| commit | ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5 (patch) | |
| tree | f581ac94d3f2c1e2059e04c392788b0ad4119ba8 /net/dcb | |
| parent | Merge branch 'nvme-4.15' of git://git.infradead.org/nvme into for-linus (diff) | |
| download | linux-ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5.tar.xz linux-ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5.zip | |
loop: fix concurrent lo_open/lo_release
范龙飞 reports that KASAN can report a use-after-free in __lock_acquire.
The reason is due to insufficient serialization in lo_release(), which
will continue to use the loop device even after it has decremented the
lo_refcnt to zero.
In the meantime, another process can come in, open the loop device
again as it is being shut down. Confusion ensues.
Reported-by: 范龙飞 <long7573@126.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Diffstat (limited to 'net/dcb')
0 files changed, 0 insertions, 0 deletions