On 2018年09月27日 17:52, Sergei Shtylyov wrote:
Hello!
On 9/27/2018 11:43 AM, Jason Wang wrote:
Just a couple of typos...
The access of vsock is not protected by vhost_vsock_lock. This may
lead use after free since vhost_vsock_dev_release() may free the
Lead to use.
pointer at the same time.
Fix this by holding the lock during the acess.
Access.
Reported-by: syzbot+e3e074963495f92a89ed@xxxxxxxxxxxxxxxxxxxxxxxxx
Fixes: 16320f363ae1 ("vhost-vsock: add pkt cancel capability")
Fixes: 433fc58e6bf2 ("VSOCK: Introduce vhost_vsock.ko")
Cc: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
[...]
MBR, Sergei
Let me post V2.
Thanks
