Messages in this thread | ![/](/images/icornerl.gif) | | From | Anton Gusev <> | Subject | [PATCH 5.10 0/1] RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests | Date | Fri, 21 Jul 2023 18:05:32 +0300 |
| |
Syzkaller reports use-after-free at addr_handler in 5.10 stable releases. The problem was fixed in upstream and backported into 5.14, but wasn't applied to 5.10 and lower versions due to a small merge conflict.
This patch is a modified version that can be cleanly applied to 5.10 and 5.4 stable branches.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
| ![\](/images/icornerr.gif) |