Al Viro 9a0467e1f6 securityfs: fix use-after-free on symlink traversal ...

[ Upstream commit 46c8744196 ]

symlink body shouldn't be freed without an RCU delay.  Switch securityfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-05-25 18:23:42 +02:00

11 KiB

Raw Blame History

View Raw