Messages in this thread | | | Date | Fri, 14 Dec 2012 11:26:57 +0000 | From | Alan Cox <> | Subject | Re: [PATCH 12/12] edac: fix kernel panic on module unloading |
| |
On Fri, 14 Dec 2012 15:03:10 +0400 Konstantin Khlebnikov <khlebnikov@openvz.org> wrote:
> This patch fixes use-after-free and double-free bugs in edac_mc_sysfs_exit(). > mci_pdev has single reference and put_device() calls mc_attr_release() which > calls kfree(), thus following device_del() works with already released memory. > An another kfree() in edac_mc_sysfs_exit() releses the same memory again. Great.
Patches for this were posted a while ago by Jean Delvare. See bugzilla 50491 as well for this.
| |