Files
linux/drivers
Linus Torvalds b392225467 loop: fix concurrent lo_open/lo_release
commit ae6650163c upstream.

范龙飞 reports that KASAN can report a use-after-free in __lock_acquire.
The reason is due to insufficient serialization in lo_release(), which
will continue to use the loop device even after it has decremented the
lo_refcnt to zero.

In the meantime, another process can come in, open the loop device
again as it is being shut down. Confusion ensues.

Reported-by: 范龙飞 <long7573@126.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Cc: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2018-02-03 17:04:24 +01:00
..
2017-12-16 10:33:55 +01:00
2018-01-10 09:27:08 +01:00
2017-12-16 10:33:53 +01:00
2017-11-30 08:37:27 +00:00
2016-09-24 10:07:35 +02:00
2018-01-02 20:33:20 +01:00
2018-01-31 12:06:13 +01:00