Re: [PATCH UEK5-U5] scsi: qla2xxx: Fix use after free in eh_abort path

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Nov 22, 2022 at 04:56:52PM -0800, Rajan Shanmugavelu wrote:
> From: Quinn Tran <qutran@xxxxxxxxxxx>
> 
> In eh_abort path driver prematurely exits the call to upper layer. Check
> whether command is aborted / completed by firmware before exiting the call.
> 
> 9 [ffff8b1ebf803c00] page_fault at ffffffffb0389778
>   [exception RIP: qla2x00_status_entry+0x48d]
>   RIP: ffffffffc04fa62d  RSP: ffff8b1ebf803cb0  RFLAGS: 00010082
>   RAX: 00000000ffffffff  RBX: 00000000000e0000  RCX: 0000000000000000
>   RDX: 0000000000000000  RSI: 00000000000013d8  RDI: fffff3253db78440
>   RBP: ffff8b1ebf803dd0   R8: ffff8b1ebcd9b0c0   R9: 0000000000000000
>   R10: ffff8b1e38a30808  R11: 0000000000001000  R12: 00000000000003e9
>   R13: 0000000000000000  R14: ffff8b1ebcd9d740  R15: 0000000000000028
>   ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018
> 10 [ffff8b1ebf803cb0] enqueue_entity at ffffffffafce708f
> 11 [ffff8b1ebf803d00] enqueue_task_fair at ffffffffafce7b88
> 12 [ffff8b1ebf803dd8] qla24xx_process_response_queue at ffffffffc04fc9a6
> [qla2xxx]
> 13 [ffff8b1ebf803e78] qla24xx_msix_rsp_q at ffffffffc04ff01b [qla2xxx]
> 14 [ffff8b1ebf803eb0] __handle_irq_event_percpu at ffffffffafd50714
> 
> Link: https://lore.kernel.org/r/20210908164622.19240-10-njavali@xxxxxxxxxxx
> Fixes: f45bca8c5052 ("scsi: qla2xxx: Fix double scsi_done for abort path")
> Cc: stable@xxxxxxxxxxxxxxx
> Reviewed-by: Himanshu Madhani <himanshu.madhani@xxxxxxxxxx>
> Co-developed-by: David Jeffery <djeffery@xxxxxxxxxx>
> Signed-off-by: David Jeffery <djeffery@xxxxxxxxxx>
> Co-developed-by: Laurence Oberman <loberman@xxxxxxxxxx>
> Signed-off-by: Laurence Oberman <loberman@xxxxxxxxxx>
> Signed-off-by: Quinn Tran <qutran@xxxxxxxxxxx>
> Signed-off-by: Nilesh Javali <njavali@xxxxxxxxxxx>
> Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>
> 
> Orabug: 34813552
> 
> (cherry picked from commit 3d33b303d4f3b74a71bede5639ebba3cfd2a2b4d)

This is already in the stable kernel releases, so why do you need it
merged again?

thanks,

greg k-h



[Index of Archives]     [Linux Kernel]     [Kernel Development Newbies]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite Hiking]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux