diff options
| author | Xiubo Li <xiubli@redhat.com> | 2020-07-06 15:51:35 +0300 |
|---|---|---|
| committer | Ilya Dryomov <idryomov@gmail.com> | 2020-08-03 12:05:25 +0300 |
| commit | d1d9655052606fd9078e896668ec90191372d513 (patch) | |
| tree | dcdb21734df1009fd848b91d7d3d54fbd57387b0 /security/lockdown | |
| parent | 585d72f33e7083972030fac7792ea3050a4a8dff (diff) | |
| download | linux-d1d9655052606fd9078e896668ec90191372d513.tar.xz | |
ceph: do not access the kiocb after aio requests
In aio case, if the completion comes very fast just before the
ceph_read_iter() returns to fs/aio.c, the kiocb will be freed in
the completion callback, then if ceph_read_iter() access again
we will potentially hit the use-after-free bug.
[ jlayton: initialize direct_lock early, and use it everywhere ]
URL: https://tracker.ceph.com/issues/45649
Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Jeff Layton <jlayton@kernel.org>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
Diffstat (limited to 'security/lockdown')
0 files changed, 0 insertions, 0 deletions