Dan Carpenter 7d93417d59 drbd: use after free in drbd_create_device() ...

[ Upstream commit a7a1598189 ]

The drbd_destroy_connection() frees the "connection" so use the _safe()
iterator to prevent a use after free.

Fixes: b6f85ef953 ("drbd: Iterate over all connections")
Signed-off-by: Dan Carpenter <error27@gmail.com>
Reviewed-by: Christoph Böhmwalder <christoph.boehmwalder@linbit.com>
Link: https://lore.kernel.org/r/Y3Jd5iZRbNQ9w6gm@kili
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-11-26 09:24:40 +01:00

..

aoe

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00

drbd

drbd: use after free in drbd_create_device()

2022-11-26 09:24:40 +01:00

mtip32xx

block: fix surprise removal for drivers calling blk_set_queue_dying

2022-02-23 12:03:15 +01:00

null_blk

null_blk: fix ida error handling in null_add_dev()

2022-08-17 14:24:00 +02:00

paride

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2021-09-02 15:09:46 -07:00

rnbd

block/rnbd-srv: Set keep_id to true after mutex_trylock

2022-08-17 14:24:00 +02:00

rsxx

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00

xen-blkback

xen-blkback: Advertise feature-persistent as user requested

2022-09-08 12:28:05 +02:00

zram

zram: do not lookup algorithm in backends table

2022-08-25 11:40:34 +02:00

amiflop.c

block: drop unused includes in <linux/genhd.h>

2022-03-16 14:23:46 +01:00

ataflop.c

block: drop unused includes in <linux/genhd.h>

2022-03-16 14:23:46 +01:00

brd.c

brd: reduce the brd_devices_mutex scope

2021-10-17 06:51:19 -06:00

cryptoloop.c

cryptoloop: add a deprecation warning

2021-08-27 10:44:54 -06:00

floppy.c

floppy: use a statically allocated error counter

2022-05-25 09:57:21 +02:00

Kconfig

virtio-blk: avoid preallocating big SGL for data

2022-07-12 16:34:56 +02:00

loop.c

loop: Check for overflow while configuring loop

2022-08-31 17:16:47 +02:00

loop.h

loop: reduce the loop_ctl_mutex scope

2021-09-03 22:14:40 -06:00

Makefile

drivers/block: remove the umem driver

2021-03-24 06:57:40 -06:00

n64cart.c

n64cart: convert bi_disk to bi_bdev->bd_disk fix build

2022-04-08 14:24:16 +02:00

nbd.c

nbd: Fix hung when signal interrupts nbd_start_device_ioctl()

2022-10-26 12:35:47 +02:00

pktcdvd.c

block: move the bdi from the request_queue to the gendisk

2021-08-09 11:53:23 -06:00

ps3disk.c

ps3disk: use memcpy_{from,to}_bvec

2021-08-02 13:37:27 -06:00

ps3vram.c

ps3vram: use bvec_virt

2021-08-16 10:50:33 -06:00

rbd_types.h

…

rbd.c

block: fix surprise removal for drivers calling blk_set_queue_dying

2022-02-23 12:03:15 +01:00

sunvdc.c

Merge tag 'char-misc-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2021-07-05 13:42:16 -07:00

swim3.c

swim3: use blk_mq_alloc_disk

2021-06-11 11:53:02 -06:00

swim_asm.S

…

swim.c

block: drop unused includes in <linux/genhd.h>

2022-03-16 14:23:46 +01:00

sx8.c

sx8: use the internal state machine to check if del_gendisk needs to be called

2021-08-12 10:29:36 -06:00

virtio_blk.c

virtio-blk: modify the value type of num in virtio_queue_rq()

2022-07-12 16:35:11 +02:00

xen-blkfront.c

xen-blkfront: Cache feature_persistent value before advertisement

2022-09-08 12:28:05 +02:00

z2ram.c

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00