]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
io_uring: hold uring_lock across io_kill_timeouts() in cancel path
authorJens Axboe <axboe@kernel.dk>
Mon, 11 May 2026 16:58:56 +0000 (10:58 -0600)
committerJens Axboe <axboe@kernel.dk>
Mon, 11 May 2026 17:14:38 +0000 (11:14 -0600)
commita65855ec34aed84e1e5b4aea0323cc1745f83a5c
tree7377de21352c7cf713154df63e5613c6d03dbfb4
parent49ae66eb8c27375075ffa308cfd4bf25af335d41
io_uring: hold uring_lock across io_kill_timeouts() in cancel path

io_uring_try_cancel_requests() dropped ctx->uring_lock before calling
io_kill_timeouts(), which walks each timeout's link chain via
io_match_task() to test REQ_F_INFLIGHT. With chain mutation now
serialized by ctx->uring_lock, that walk needs the lock too.

Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/cancel.c