Unverified Commit 797ab005 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!14933 scsi: sg: Fix slab-use-after-free read in sg_release() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zheng Qixing <zhengqixing@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/3NNJAZXAY5FBU5DWHZKCBKUJKAFBEPQC/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBEAN7 
 
Link:https://gitee.com/openeuler/kernel/pulls/14933

 

Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Reviewed-by: default avatarYu Kuai <yukuai3@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents 4d48400e dd5c8981

drivers/scsi/sg.c

+1 −1
Original line number Diff line number Diff line
@@ -395,7 +395,6 @@ sg_release(struct inode *inode, struct file *filp) 


	mutex_lock(&sdp->open_rel_lock);

	scsi_autopm_put_device(sdp->device);

	kref_put(&sfp->f_ref, sg_remove_sfp);

	sdp->open_cnt--;



	/* possibly many open()s waiting on exlude clearing, start many;
@@ -407,6 +406,7 @@ sg_release(struct inode *inode, struct file *filp) 
		wake_up_interruptible(&sdp->open_wait);

	}

	mutex_unlock(&sdp->open_rel_lock);

	kref_put(&sfp->f_ref, sg_remove_sfp);

	return 0;

}