diff options
| author | Christoph Hellwig <[email protected]> | 2021-08-16 14:26:14 +0200 |
|---|---|---|
| committer | Jens Axboe <[email protected]> | 2021-08-16 10:49:11 -0600 |
| commit | 889c05cc5834a1eef2dbe1e639cfd7a81c4f4c6d (patch) | |
| tree | 61d680894772d993d79976efa1c593cfdb1c0dff /drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.h | |
| parent | 9451aa0aacaf7ea13d1acfd5de8b63a6e0b24fac (diff) | |
block: ensure the bdi is freed after inode_detach_wb
inode_detach_wb references the "main" bdi of the inode. With the
recent change to move the bdi from the request_queue to the gendisk
this causes a guaranteed use after free when using certain cgroup
configurations. The big itself is older through as any non-default
inode reference (e.g. an open file descriptor) could have injected
this use after free even before that.
Fixes: 52ebea749aae ("writeback: make backing_dev_info host cgroup-specific bdi_writebacks")
Reported-by: Qian Cai <[email protected]>
Reported-by: syzbot <[email protected]>
Signed-off-by: Christoph Hellwig <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jens Axboe <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.h')
0 files changed, 0 insertions, 0 deletions