diff options
| author | Ming Lei <[email protected]> | 2025-04-25 01:37:40 +0000 |
|---|---|---|
| committer | Jens Axboe <[email protected]> | 2025-04-25 01:52:20 +0000 |
| commit | f40139fde5278d81af3227444fd6e76a76b9506d (patch) | |
| tree | ee9f4a08af52c19113189b707fd0ad80c72426d5 /drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | |
| parent | ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA (diff) | |
| download | kernel-f40139fde5278d81af3227444fd6e76a76b9506d.tar.gz kernel-f40139fde5278d81af3227444fd6e76a76b9506d.zip | |
ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd
ublk_cancel_cmd() calls io_uring_cmd_done() to complete uring_cmd, but
we may have scheduled task work via io_uring_cmd_complete_in_task() for
dispatching request, then kernel crash can be triggered.
Fix it by not trying to canceling the command if ublk block request is
started.
Fixes: 216c8f5ef0f2 ("ublk: replace monitor with cancelable uring_cmd")
Reported-by: Jared Holzman <[email protected]>
Tested-by: Jared Holzman <[email protected]>
Closes: https://lore.kernel.org/linux-block/[email protected]/
Signed-off-by: Ming Lei <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Jens Axboe <[email protected]>
Diffstat (limited to 'drivers/gpu/drm/amd/amdgpu/amdgpu_object.c')
0 files changed, 0 insertions, 0 deletions