diff options
| author | Paolo Bonzini <[email protected]> | 2018-05-28 13:31:13 +0200 |
|---|---|---|
| committer | Paolo Bonzini <[email protected]> | 2018-07-18 11:31:27 +0200 |
| commit | 9432a3175770e06cb83eada2d91fac90c977cb99 (patch) | |
| tree | 13f5e44fdcc83b3b5fdc7607290064130af84853 /scripts/gdb/linux/lists.py | |
| parent | b5020a8e6b54d2ece80b1e7dedb33c79a40ebd47 (diff) | |
KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer
A comment warning against this bug is there, but the code is not doing what
the comment says. Therefore it is possible that an EPOLLHUP races against
irq_bypass_register_consumer. The EPOLLHUP handler schedules irqfd_shutdown,
and if that runs soon enough, you get a use-after-free.
Reported-by: syzbot <[email protected]>
Cc: [email protected]
Signed-off-by: Paolo Bonzini <[email protected]>
Reviewed-by: David Hildenbrand <[email protected]>
Diffstat (limited to 'scripts/gdb/linux/lists.py')
0 files changed, 0 insertions, 0 deletions