mbox series

[5.10,0/1] RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

Message ID 20230721150535.191318-1-aagusev@ispras.ru (mailing list archive)
Headers show
Series RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests | expand

Message

Anton Gusev July 21, 2023, 3:05 p.m. UTC 
Syzkaller reports use-after-free at addr_handler in 5.10 stable
releases. The problem was fixed in upstream and backported into
5.14, but wasn't applied to 5.10 and lower versions due to a small
merge conflict.

This patch is a modified version that can be cleanly applied to 5.10 and
5.4 stable branches.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.