Messages in this thread | | | From | "Martin K. Petersen" <> | Subject | Re: [PATCH] scsi: libfc: Fix use after free in fc_exch_abts_resp() | Date | Tue, 15 Mar 2022 01:02:32 -0400 |
| |
On Thu, 3 Mar 2022 09:51:15 +0800, Jianglei Nie wrote:
> fc_exch_release(ep) will decrease the ep's reference count. When the > reference count reaches zero, it is freed. But ep is still used in the > following code, which will lead to a use after free. > > We should return the function after the call of fc_exch_release() to > avoid use after free. > > [...]
Applied to 5.18/scsi-queue, thanks!
[1/1] scsi: libfc: Fix use after free in fc_exch_abts_resp() https://git.kernel.org/mkp/scsi/c/271add11994b
-- Martin K. Petersen Oracle Linux Engineering
| |