[PATCH v3 0/3] dmaengine: fix kref underflow and UAF in dma_chan_put()
Shivank Garg <[email protected]>
| Newsgroups | org.kernel.vger.dmaengine,org.kernel.vger.linux-kernel,org.kernel.vger.stable |
|---|---|
| Message-ID | <[email protected]> |
Fix bugs related to dma_chan_put(), found while testing with SDXI[1]. [1]: https://lore.kernel.org/dmaengine/[email protected] Signed-off-by: Shivank Garg <[email protected]> --- Changes in v3: - Add patch 3: add synchronize_rcu() to wait for RCU readers to prevent use-after-free. (Sashiko) - Link to v2: https://lore.kernel.org/r/[email protected] Changes in v2: - Add patch 2 fixing the dma_chan_put()/dma_release_channel() use-after-free (sashiko) - Link to v1: https://lore.kernel.org/r/[email protected] --- Shivank Garg (3): dmaengine: Fix device kref underflow in dma_chan_put() dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() dmaengine: wait for RCU readers before releasing dma_device drivers/dma/dmaengine.c | 18 ++++++++++++++---- 1 file changed, 14 insertions(+), 4 deletions(-) --- base-commit: 0d995da5fb97e8c312834575604d4423eb6225b7 change-id: 20260518-dmaengine-kref-fix-7b21acb09455 Best regards, -- Shivank Garg <[email protected]>