integ/kernel/kernel-rt
Bin Yang 853388e615 epoll: fix use-after-free in eventpoll_release_file
back port upstream patch
ebe06187bf

the epi is removed from list by list_del_rcu(&epi->fllink);
under list_for_each_entry_rcu() without rcu_read_lock.

if the rcu grace-period thread free epi before next list_for_each loop,
the content of epi will be corrupted.

Change-Id: I75dbf8ada5ca4734761efe260ca6d6f85886b180
Closes-Bug: 1837430
Suggested-by: daniel.badea@windriver.com
Signed-off-by: Bin Yang <bin.yang@intel.com>
2019-07-31 14:41:15 +08:00
..
centos epoll: fix use-after-free in eventpoll_release_file 2019-07-31 14:41:15 +08:00
files Internal restructuring of stx-integ 2018-08-01 10:06:31 -04:00