]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
um: virtio_uml: Fix use-after-free after put_device in probe
authorMiaoqian Lin <linmq006@gmail.com>
Thu, 28 Aug 2025 07:00:51 +0000 (15:00 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 25 Sep 2025 08:58:51 +0000 (10:58 +0200)
commitaaf900a83508c8cd5cdf765e7749f9076196ec7f
tree7d61c81b1e9ac52eaf4c3d3438a54d37482eb7d1
parentdea5b468701082f52015c15b447db988f0f3c744
um: virtio_uml: Fix use-after-free after put_device in probe

[ Upstream commit 7ebf70cf181651fe3f2e44e95e7e5073d594c9c0 ]

When register_virtio_device() fails in virtio_uml_probe(),
the code sets vu_dev->registered = 1 even though
the device was not successfully registered.
This can lead to use-after-free or other issues.

Fixes: 04e5b1fb0183 ("um: virtio: Remove device on disconnect")
Signed-off-by: Miaoqian Lin <linmq006@gmail.com>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
arch/um/drivers/virtio_uml.c