tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

Merge tag 'char-misc-5.5-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

Pull char/misc fix from Greg KH:
"Here is a single fix, for the chrdev core, for 5.5-rc6

There's been a long-standing race condition triggered by syzbot, and
occasionally real people, in the chrdev open() path. Will finally took
the time to track it down and fix it for real before the holidays.

Here's that one patch, it's been in linux-next for a while with no
reported issues and it does fix the reported problem"

* tag 'char-misc-5.5-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
chardev: Avoid potential use-after-free in 'chrdev_open()'

Linus Torvalds 9fb7007d 7da37cd0

+1 -1
+1 -1
fs/char_dev.c
··· 352 352 353 353 if (owner && !try_module_get(owner)) 354 354 return NULL; 355 - kobj = kobject_get(&p->kobj); 355 + kobj = kobject_get_unless_zero(&p->kobj); 356 356 if (!kobj) 357 357 module_put(owner); 358 358 return kobj;