]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
fuse: missing copy_finish in fuse-over-io-uring argument copies
authorCheng Ding <cding@ddn.com>
Tue, 21 Oct 2025 20:46:42 +0000 (22:46 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 2 Jan 2026 11:57:31 +0000 (12:57 +0100)
commitb79938863f436960eff209130f025c4bd3026bf8
tree39c854cf2ade10f9241407e77ac8283b71160c36
parente0d6de83a4cc22bbac72713f3a58121af36cc411
fuse: missing copy_finish in fuse-over-io-uring argument copies

commit 6e0d7f7f4a43ac8868e98c87ecf48805aa8c24dd upstream.

Fix a possible reference count leak of payload pages during
fuse argument copies.

[Joanne: simplified error cleanup]

Fixes: c090c8abae4b ("fuse: Add io-uring sqe commit and fetch support")
Cc: stable@vger.kernel.org # v6.14
Signed-off-by: Cheng Ding <cding@ddn.com>
Signed-off-by: Bernd Schubert <bschubert@ddn.com>
Reviewed-by: Joanne Koong <joannelkoong@gmail.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/fuse/dev.c
fs/fuse/dev_uring.c
fs/fuse/fuse_dev_i.h