linux

mirror of https://github.com/hardkernel/linux.git synced 2026-03-29 22:07:43 +09:00

Files

Michael S. Tsirkin f5ce1d2513 vhost-net: fix use-after-free in vhost_net_flush

[ Upstream commit c38e39c378 ]

vhost_net_ubuf_put_and_wait has a confusing name:
it will actually also free it's argument.
Thus since commit 1280c27f8e
    "vhost-net: flush outstanding DMAs on memory change"
vhost_net_flush tries to use the argument after passing it
to vhost_net_ubuf_put_and_wait, this results
in use after free.
To fix, don't free the argument in vhost_net_ubuf_put_and_wait,
add an new API for callers that want to free ubufs.

Acked-by: Asias He <asias@redhat.com>
Acked-by: Jason Wang <jasowang@redhat.com>
Signed-off-by: Michael S. Tsirkin <mst@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2013-07-28 16:29:57 -07:00

Kconfig

Merge tag 'virtio-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2013-05-02 14:14:04 -07:00

Makefile

Merge tag 'virtio-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2013-05-02 14:14:04 -07:00

net.c

vhost-net: fix use-after-free in vhost_net_flush

2013-07-28 16:29:57 -07:00

scsi.c

vhost-scsi: Enable VIRTIO_RING_F_EVENT_IDX