diff options
| author | Linus Torvalds <[email protected]> | 2025-09-22 18:16:14 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2025-09-22 18:16:14 +0000 |
| commit | d4c7fccfa784da0583fed9c8f98ed78236c030fb (patch) | |
| tree | a820da3a60d3c25c942921fba1922f36a775648b /fs/file_table.c | |
| parent | Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma (diff) | |
| parent | iommufd/selftest: Update the fail_nth limit (diff) | |
| download | kernel-d4c7fccfa784da0583fed9c8f98ed78236c030fb.tar.gz kernel-d4c7fccfa784da0583fed9c8f98ed78236c030fb.zip | |
Merge tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd
Pull iommufd fixes from Jason Gunthorpe:
"Fix two user triggerable use-after-free issues:
- Possible race UAF setting up mmaps
- Syzkaller found UAF when erroring an file descriptor creation ioctl
due to the fput() work queue"
* tag 'for-linus-iommufd' of git://git.kernel.org/pub/scm/linux/kernel/git/jgg/iommufd:
iommufd/selftest: Update the fail_nth limit
iommufd: WARN if an object is aborted with an elevated refcount
iommufd: Fix race during abort for file descriptors
iommufd: Fix refcounting race during mmap
Diffstat (limited to 'fs/file_table.c')
0 files changed, 0 insertions, 0 deletions