]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
projects / thirdparty / kernel / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c456013) | patch
um: virtio_uml: Fix use-after-free after put_device in probe
authorMiaoqian Lin <linmq006@gmail.com>
Thu, 28 Aug 2025 07:00:51 +0000 (15:00 +0800)
committerJohannes Berg <johannes.berg@intel.com>
Wed, 10 Sep 2025 12:24:16 +0000 (14:24 +0200)
commit7ebf70cf181651fe3f2e44e95e7e5073d594c9c0
tree1e0bdceaf6ff30358fb1e81ea29337a9b4e79f3atree | snapshot
parentc45601306aa5831c3e59158f95b8e34f27e9ea09commit | diff
um: virtio_uml: Fix use-after-free after put_device in probe

When register_virtio_device() fails in virtio_uml_probe(),
the code sets vu_dev->registered = 1 even though
the device was not successfully registered.
This can lead to use-after-free or other issues.

Fixes: 04e5b1fb0183 ("um: virtio: Remove device on disconnect")
Signed-off-by: Miaoqian Lin <linmq006@gmail.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
arch/um/drivers/virtio_uml.c diff | blob | blame | history
A mirror of Linus' kernel repository