[lvc-project] [PATCH 5.10 0/1] RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests

Anton Gusev aagusev at ispras.ru
Fri Jul 21 18:05:32 MSK 2023


Syzkaller reports use-after-free at addr_handler in 5.10 stable
releases. The problem was fixed in upstream and backported into
5.14, but wasn't applied to 5.10 and lower versions due to a small
merge conflict.

This patch is a modified version that can be cleanly applied to 5.10 and
5.4 stable branches.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.



More information about the lvc-project mailing list