tjh.dev / kernel
Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux
1
fork

Configure Feed

Select the types of activity you want to include in your feed.

dm clone: Fix UAF in clone_dtr()

Dm_clone also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.

Therefore, cancelling timer again in clone_dtr().

Cc: stable@vger.kernel.org
Fixes: 7431b7835f554 ("dm: add clone target")
Signed-off-by: Luo Meng <luomeng12@huawei.com>
Signed-off-by: Mike Snitzer <snitzer@kernel.org>

authored by

Luo Meng and committed by
Mike Snitzer e4b5957c 88430ebc

+1
+1
drivers/md/dm-clone-target.c
··· 1958 1958 1959 1959 mempool_exit(&clone->hydration_pool); 1960 1960 dm_kcopyd_client_destroy(clone->kcopyd_client); 1961 + cancel_delayed_work_sync(&clone->waker); 1961 1962 destroy_workqueue(clone->wq); 1962 1963 hash_table_exit(clone); 1963 1964 dm_clone_metadata_close(clone->cmd);