On Mon, 26 Dec 2022 11:06:05 +0800, Yu Kuai wrote:
> Commit 64dc8c732f5c ("block, bfq: fix possible uaf for 'bfqq->bic'")
> will access 'bic->bfqq' in bic_set_bfqq(), however, bfq_exit_icq_bfqq()
> can free bfqq first, and then call bic_set_bfqq(), which will cause uaf.
>
> Fix the problem by moving bfq_exit_bfqq() behind bic_set_bfqq().
>
>
> [...]
Applied, thanks!
[1/1] block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq
commit: 246cf66e300b76099b5dbd3fdd39e9a5dbc53f02
Best regards,
--
Jens Axboe
