diff options
| author | Sidraya Jayagond <sidraya@linux.ibm.com> | 2026-09-22 09:31:49 +0200 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-09-24 10:19:50 -0700 |
| commit | 61cb282fe97b3b0ba32ca09417a693162bf4ae3f (patch) | |
| tree | d1214b84bb1f1773f609603d93bee4c9a07749b3 /tools/perf/scripts/python/bin/stackcollapse-record | |
| parent | ba3d1f480c7a3fba963e7867ad6cc557c197acbc (diff) | |
| download | linux-next-61cb282fe97b3b0ba32ca09417a693162bf4ae3f.tar.gz linux-next-61cb282fe97b3b0ba32ca09417a693162bf4ae3f.zip | |
net/smc: fix UAF on lgr list traversal in smcr_port_err()
smcr_port_err() traverses smc_lgr_list.list without holding
smc_lgr_list.lock, allowing a concurrent smc_lgr_terminate_sched()
to free an lgr while it is still being dereferenced.
Hold smc_lgr_list.lock across the traversal. Update
smc_ib_gid_check() to call smcr_port_err() after releasing the lock.
Fixes: 541afa10c126 ("net/smc: add smcr_port_err() and smcr_link_down() processing")
Reviewed-by: Mahanta Jambigi <mjambigi@linux.ibm.com>
Signed-off-by: Sidraya Jayagond <sidraya@linux.ibm.com>
Reviewed-by: Dust Li <dust.li@linux.alibaba.com>
Link: https://patch.msgid.link/20260922073149.474762-1-sidraya@linux.ibm.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-record')
0 files changed, 0 insertions, 0 deletions