linux-kernel - aio: fix a user triggered use after free

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <1477727070-18806-1-git-send-email-hch@lst.de>
Date:   Sat, 29 Oct 2016 09:44:28 +0200
From:   Christoph Hellwig <hch@....de>
To:     torvalds@...ux-foundation.org, viro@...iv.linux.org.uk
Cc:     jack@...e.cz, dmonakhov@...nvz.org, jmoyer@...hat.com,
        linux-fsdevel@...r.kernel.org, linux-aio@...ck.org,
        linux-kernel@...r.kernel.org
Subject: aio: fix a user triggered use after free

Hi Linus,

the patch below fixes a use after free triggered if one threads closes
a file descriptor after another just started an aio operation.

The patch is originally from Jan with some updates from me - I tried
to get in through Al but I haven't managed to get him to respond yet,
but I'd really like to get into the tree, -stable and the distros ASAP.