diff options
| author | Theodore Ts'o <[email protected]> | 2020-02-15 21:40:37 +0000 |
|---|---|---|
| committer | Theodore Ts'o <[email protected]> | 2020-02-21 05:37:09 +0000 |
| commit | 1d0c3924a92e69bfa91163bda83c12a994b4d106 (patch) | |
| tree | c8bdc41a140f8ef4f01d6b1b7f4bd7c86b3edecc /drivers/usb/cdns3/core.c | |
| parent | ext4: add cond_resched() to __ext4_find_entry() (diff) | |
| download | kernel-1d0c3924a92e69bfa91163bda83c12a994b4d106.tar.gz kernel-1d0c3924a92e69bfa91163bda83c12a994b4d106.zip | |
ext4: fix potential race between online resizing and write operations
During an online resize an array of pointers to buffer heads gets
replaced so it can get enlarged. If there is a racing block
allocation or deallocation which uses the old array, and the old array
has gotten reused this can lead to a GPF or some other random kernel
memory getting modified.
Link: https://bugzilla.kernel.org/show_bug.cgi?id=206443
Link: https://lore.kernel.org/r/[email protected]
Reported-by: Suraj Jitindar Singh <[email protected]>
Signed-off-by: Theodore Ts'o <[email protected]>
Cc: [email protected]
Diffstat (limited to 'drivers/usb/cdns3/core.c')
0 files changed, 0 insertions, 0 deletions