github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-05-28 17:13:52 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

VFIO fix for v7.0-rc6

Browse Source 
- Fix double-free and reference count underflow if dma-buf file
    allocation fails. (Alex Williamson)
 -----BEGIN PGP SIGNATURE-----
 
 iQJFBAABCgAvFiEEQvbATlQL0amee4qQI5ubbjuwiyIFAmnGrhQRHGFsZXhAc2hh
 emJvdC5vcmcACgkQI5ubbjuwiyIFaQ//XXkI84Oe3GIhExdyoU0LyTcr60QD01rz
 n6IwTeyaRS5zFCq0/vDISKFej+ns2AzB24VKw/VGv4I4HL6Q6K7WJi103cb67a38
 7c7Lo9ZmU+qOI0QxQBnt5rAISdLmg/3n3AJ6DvRBRroMOjmntyVoOqrkSzchOWSm
 n0BKJeM6XbbZ1jKFE6mbPJoAsssCzv7rP4JYQVXfxLFzITZG5SB4r+dqiY4erSW6
 8c8lofO9/umJAYhwohDKtIK1Uhh5W8uGz2YKFHSflhV+WD+8xJ+H8xE3GJ32har0
 DarubtM3Vs0aHdA5YMuvw4oVRPJOukaZvj+sQYwVSmmSPPOlzvFkA+VuxPQZQOxj
 A/cQnRXSeCvjqyJAz/pqDh5Lr40BaQh2LE8q5mn398ks+atZ9tXzZNoGHTOzyNRB
 0Wf+WK8fv+8YVl/ZN8m1X5jhkvJJq+DK9CAGAFdsIuNfFl1+b77cnVN+rbSSxNPH
 7bm35tRlTqFsBCNdvth8ShPrvbPxZ3a42ngp/8U5gWLBW2Oa7YjYqtqAXzjJGvPq
 FNqTZrjVRX8QxcMjR/LqOgOZwAy1XrxJ/1RtzlFN5bLK99u19Z9/jOykanSZsVOP
 llZi7UuPJk20D5NCIHySn33snIOs+j+JdRgnojb0P2gvKInjpfYYFO3CL1aW5D7E
 ZyF2zPWhACQ=
 =nR3s
 -----END PGP SIGNATURE-----

Merge tag 'vfio-v7.0-rc6' of https://github.com/awilliam/linux-vfio

Pull VFIO fix from Alex Williamson:

 - Fix double-free and reference count underflow if dma-buf file
   allocation fails (Alex Williamson)

* tag 'vfio-v7.0-rc6' of https://github.com/awilliam/linux-vfio:
  vfio/pci: Fix double free in dma-buf feature
This commit is contained in:
Linus Torvalds 2026-03-27 15:59:30 -07:00
commit faf44e54f6
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
drivers/vfio/pci/vfio_pci_dmabuf.c
View File

@ -301,11 +301,10 @@ int vfio_pci_core_feature_dma_buf(struct vfio_pci_core_device *vdev, u32 flags,
*/
ret = dma_buf_fd(priv->dmabuf, get_dma_buf.open_flags);
if (ret < 0)
goto err_dma_buf;
dma_buf_put(priv->dmabuf);
return ret;
err_dma_buf:
dma_buf_put(priv->dmabuf);
err_dev_put:
vfio_device_put_registration(&vdev->vdev);
err_free_phys: