diff options
author | Dave Chinner <dchinner@redhat.com> | 2022-12-08 19:29:22 +0300 |
---|---|---|
committer | Darrick J. Wong <djwong@kernel.org> | 2022-12-08 19:29:58 +0300 |
commit | 52f31ed228212ba572c44e15e818a3a5c74122c0 (patch) | |
tree | 969841c970dafd1e4dae2457c4d5a3dc4c88a839 /include/linux | |
parent | 1f5619ed881081be300db61da552ffae7163bb72 (diff) | |
download | linux-52f31ed228212ba572c44e15e818a3a5c74122c0.tar.xz |
xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
Resulting in a UAF if the shrinker races with some other dquot
freeing mechanism that sets XFS_DQFLAG_FREEING before the dquot is
removed from the LRU. This can occur if a dquot purge races with
drop_caches.
Reported-by: syzbot+912776840162c13db1a3@syzkaller.appspotmail.com
Signed-off-by: Dave Chinner <dchinner@redhat.com>
Reviewed-by: Darrick J. Wong <djwong@kernel.org>
Signed-off-by: Darrick J. Wong <djwong@kernel.org>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions