security/inode.c · c5eaab1d131d0a6272df7d55a971a67400d63f56 · Tobias Schramm / linux-pinebook-pro

5 years ago

securityfs: fix use-after-free on symlink traversal · 46c87441

Al Viro authored 5 years ago


symlink body shouldn't be freed without an RCU delay.  Switch securityfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

46c87441

History

securityfs: fix use-after-free on symlink traversal

Al Viro authored 5 years ago


symlink body shouldn't be freed without an RCU delay.  Switch securityfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

Code owners

Assign users and groups as approvers for specific file changes. Learn more.

inode.c 10.68 KiB

Admin message