The patch titled md: fix use after free when removing rdev via sysfs has been removed from the -mm tree. Its filename was md-fix-use-after-free-when-removing-rdev-via-sysfs.patch This patch was dropped because it was merged into mainline or a subsystem tree The current -mm tree may be found at http://userweb.kernel.org/~akpm/mmotm/ ------------------------------------------------------ Subject: md: fix use after free when removing rdev via sysfs From: Dan Williams <dan.j.williams@xxxxxxxxx> rdev->mddev is no longer valid upon return from entry->store() when the 'remove' command is given. Cc: <stable@xxxxxxxxxx> Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx> Signed-off-by: Neil Brown <neilb@xxxxxxx> Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx> --- drivers/md/md.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff -puN drivers/md/md.c~md-fix-use-after-free-when-removing-rdev-via-sysfs drivers/md/md.c --- a/drivers/md/md.c~md-fix-use-after-free-when-removing-rdev-via-sysfs +++ a/drivers/md/md.c @@ -2097,7 +2097,7 @@ rdev_attr_store(struct kobject *kobj, st rv = -EBUSY; else rv = entry->store(rdev, page, length); - mddev_unlock(rdev->mddev); + mddev_unlock(mddev); } return rv; } _ Patches currently in -mm which might be from dan.j.williams@xxxxxxxxx are origin.patch sysfs-provide-a-clue-about-the-effects-of-config_usb_device_class=y.patch fsldma-the-mpc8377mds-board-device-tree-node-for-fsldma-driver.patch -- To unsubscribe from this list: send the line "unsubscribe mm-commits" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html