]> git.ipfire.org Git - thirdparty/linux.git/commit
io_uring: fix iowq_limits data race in tctx node addition
authorJens Axboe <axboe@kernel.dk>
Mon, 20 Apr 2026 14:04:00 +0000 (14:04 +0000)
committerJens Axboe <axboe@kernel.dk>
Mon, 20 Apr 2026 20:57:21 +0000 (14:57 -0600)
commit42a702aaedf54aa8056fc429fc757a600182e5f7
tree788e37c7cac05458b404418f930497169ce09584
parent41859843f27dd5c8d3bc43489ad9196c96d39f2b
io_uring: fix iowq_limits data race in tctx node addition

__io_uring_add_tctx_node() reads ctx->int_flags and
ctx->iowq_limits[0..1] without holding ctx->uring_lock, while
io_register_iowq_max_workers() writes these same fields under the lock.

Mostly an application problem if you try and make these race, but let's
silence KCSAN by just grabbing the ->uring_lock around the operation.
This is a slow path operation anyway, and ->uring_lock will be grabbed
by submission right after anyway.

Fixes: 2e480058ddc2 ("io-wq: provide a way to limit max number of workers")
Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/tctx.c