Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1609922

Re: kvm: use-after-free in srcu_reschedule

Show all headers | View raw

On 27/03/2017 16:46, Dmitry Vyukov wrote:
> 
> Paul McKenney writes:
> 
> ===
> Hmmm...  I am not seeing a call to cleanup_srcu_struct() for the
> ->track_srcu field of the kvm_page_track_notifier_head structure.
> Or is this structure immortal, so that it is never cleaned up?
> Or am I just blind this morning?
> 
> In any case, freeing the kvm_page_track_notifier_head structure
> without first invoking cleanup_srcu_struct() on its ->track_srcu
> srcu_struct field could easily result in a use-after-free bug.
> ===
> 
> I also don't see cleanup of page track srcu.

Thanks, will take a look and fix.

Paolo

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

kvm: use-after-free in srcu_reschedule Dmitry Vyukov <dvyukov@google.com> - 2017-03-27 16:50 +0200
  Re: kvm: use-after-free in srcu_reschedule Paolo Bonzini <pbonzini@redhat.com> - 2017-03-27 17:10 +0200

csiph-web