Thread (3 messages) 3 messages, 3 authors, 2021-11-03

Re: [PATCH] bcache: fix use-after-free problem in bcache_device_free()

From: Jens Axboe <axboe@kernel.dk>
Date: 2021-11-03 12:00:35
Also in: linux-block, stable

On Wed, 3 Nov 2021 14:49:17 +0800, Coly Li wrote:
In bcache_device_free(), pointer disk is referenced still in
ida_simple_remove() after blk_cleanup_disk() gets called on this
pointer. This may cause a potential panic by use-after-free on the
disk pointer.

This patch fixes the problem by calling blk_cleanup_disk() after
ida_simple_remove().

[...]
Applied, thanks!

[1/1] bcache: fix use-after-free problem in bcache_device_free()
      commit: 8468f45091d2866affed6f6a7aecc20779139173

Best regards,
-- 
Jens Axboe

Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help