On Tue, Feb 10, 2009 at 1:31 AM, Li Zefan <lizf@xxxxxxxxxxxxxx> wrote: > In cgroup_kill_sb(), root is freed before sb is detached from the list, > so another sget() may find this sb and call cgroup_test_super(), > which will access the root that has been freed. > > Reported-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx> > Signed-off-by: Li Zefan <lizf@xxxxxxxxxxxxxx> Acked-by: Paul Menage <menage@xxxxxxxxxx> Seems like the safest fix. Paul _______________________________________________ Containers mailing list Containers@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/containers