diff options
| author | Dave Chinner <dchinner@redhat.com> | 2022-12-08 19:29:22 +0300 |
|---|---|---|
| committer | Darrick J. Wong <djwong@kernel.org> | 2022-12-08 19:29:58 +0300 |
| commit | 52f31ed228212ba572c44e15e818a3a5c74122c0 (patch) | |
| tree | 969841c970dafd1e4dae2457c4d5a3dc4c88a839 /fs/xfs/xfs_refcount_item.c | |
| parent | 1f5619ed881081be300db61da552ffae7163bb72 (diff) | |
| download | linux-52f31ed228212ba572c44e15e818a3a5c74122c0.tar.xz | |
xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
Resulting in a UAF if the shrinker races with some other dquot
freeing mechanism that sets XFS_DQFLAG_FREEING before the dquot is
removed from the LRU. This can occur if a dquot purge races with
drop_caches.
Reported-by: syzbot+912776840162c13db1a3@syzkaller.appspotmail.com
Signed-off-by: Dave Chinner <dchinner@redhat.com>
Reviewed-by: Darrick J. Wong <djwong@kernel.org>
Signed-off-by: Darrick J. Wong <djwong@kernel.org>
Diffstat (limited to 'fs/xfs/xfs_refcount_item.c')
0 files changed, 0 insertions, 0 deletions