Unverified Commit b82e5397 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15682 padata: fix UAF in padata_reorder 

Merge Pull Request from: @ci-robot 
 
PR sync from: Zicheng Qu <quzicheng@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/O4L3VZB7CRFMWOO2NMP2X5A4YUWQYQZC/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBPBHS 
 
Link:https://gitee.com/openeuler/kernel/pulls/15682

 

Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Reviewed-by: default avatarLu Jialin <lujialin4@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 033a13cf 4bd24ebf

kernel/padata.c

+6 −0
Original line number Diff line number Diff line
@@ -1120,6 +1120,12 @@ void padata_free_shell(struct padata_shell *ps) 
	if (!ps)

		return;



	/*

	 * Wait for all _do_serial calls to finish to avoid touching

	 * freed pd's and ps's.

	 */

	synchronize_rcu();



	mutex_lock(&ps->pinst->lock);

	list_del(&ps->list);

	pd = rcu_dereference_protected(ps->pd, 1);