]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
bcache: fix uninitialized closure object
authorMingzhe Zou <mingzhe.zou@easystack.cn>
Fri, 3 Apr 2026 04:21:35 +0000 (12:21 +0800)
committerJens Axboe <axboe@kernel.dk>
Fri, 3 Apr 2026 11:11:08 +0000 (05:11 -0600)
commit20a8e451ec1c7e99060b1bbaaad03ce88c39ddb8
tree77449720793ecf3fe3a978aea76250e6ae110ca7
parentfec114a98b8735ee89c75216c45a78e28be0f128
bcache: fix uninitialized closure object

In the previous patch ("bcache: fix cached_dev.sb_bio use-after-free and
crash"), we adopted a simple modification suggestion from AI to fix the
use-after-free.

But in actual testing, we found an extreme case where the device is
stopped before calling bch_write_bdev_super().

At this point, struct closure sb_write has not been initialized yet.
For this patch, we ensure that sb_bio has been completed via
sb_write_mutex.

Signed-off-by: Mingzhe Zou <mingzhe.zou@easystack.cn>
Signed-off-by: Coly Li <colyli@fnnas.com>
Link: https://patch.msgid.link/20260403042135.2221247-1-colyli@fnnas.com
Fixes: fec114a98b87 ("bcache: fix cached_dev.sb_bio use-after-free and crash")
Signed-off-by: Jens Axboe <axboe@kernel.dk>
drivers/md/bcache/super.c