]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
NFSv4.1: protect destroying and nullifying bc_serv structure
authorOlga Kornievskaia <okorniev@redhat.com>
Tue, 4 Nov 2025 22:29:27 +0000 (17:29 -0500)
committerTrond Myklebust <trond.myklebust@hammerspace.com>
Sun, 23 Nov 2025 20:30:12 +0000 (15:30 -0500)
commit9e9fdd0ad0fba799dbae7ecfd167199885fb63a1
treeda2504450d52531b7c39a75e6075bda3bc896d5f
parent6f8b26c90a4d645fd5c944c41a6f0fd61ec27c50
NFSv4.1: protect destroying and nullifying bc_serv structure

When we are shutting down the client, we free the callback
server structure and then at a later pointer we free the
transport used by the client. Yet, it's possible that after
the callback server is freed, the transport receives a
backchannel request at which point we can dereferene freed
memory. Instead, do the freeing the bc server and nullying
bc_serv under the lock.

Signed-off-by: Olga Kornievskaia <okorniev@redhat.com>
Signed-off-by: Trond Myklebust <trond.myklebust@hammerspace.com>
fs/nfs/callback.c