]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
nvmet-rdma: fix response use after free
authorIsrael Rukshin <israelr@mellanox.com>
Wed, 5 Dec 2018 16:54:57 +0000 (16:54 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 21 Dec 2018 13:11:39 +0000 (14:11 +0100)
commit36764b4a4363ef6dc5a6335acd3157c9dc94ebe4
tree591fbf48f75ee86779133801275583072aa1077e
parent89efcfc544ee1d9d4e68ec44d3932db3f3feb3b8
nvmet-rdma: fix response use after free

[ Upstream commit d7dcdf9d4e15189ecfda24cc87339a3425448d5c ]

nvmet_rdma_release_rsp() may free the response before using it at error
flow.

Fixes: 8407879 ("nvmet-rdma: fix possible bogus dereference under heavy load")
Signed-off-by: Israel Rukshin <israelr@mellanox.com>
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Reviewed-by: Max Gurtovoy <maxg@mellanox.com>
Signed-off-by: Christoph Hellwig <hch@lst.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/nvme/target/rdma.c