linux-stable/drivers/infiniband/ulp/srpt
William Kucharski 85570b91e4 RDMA/srpt: Do not register event handler until srpt device is fully setup
[ Upstream commit c21a8870c9 ]

Upon rare occasions, KASAN reports a use-after-free Write
in srpt_refresh_port().

This seems to be because an event handler is registered before the
srpt device is fully setup and a race condition upon error may leave a
partially setup event handler in place.

Instead, only register the event handler after srpt device initialization
is complete.

Fixes: a42d985bd5 ("ib_srpt: Initial SRP Target merge for v3.3-rc1")
Signed-off-by: William Kucharski <william.kucharski@oracle.com>
Link: https://lore.kernel.org/r/20240202091549.991784-2-william.kucharski@oracle.com
Reviewed-by: Bart Van Assche <bvanassche@acm.org>
Signed-off-by: Leon Romanovsky <leon@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-03-26 18:19:58 -04:00
..
ib_dm_mad.h
ib_srpt.c RDMA/srpt: Do not register event handler until srpt device is fully setup 2024-03-26 18:19:58 -04:00
ib_srpt.h RDMA/srpt: Fix a use-after-free 2022-07-29 16:45:37 -03:00
Kconfig treewide: replace '---help---' in Kconfig files with 'help' 2020-06-14 01:57:21 +09:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00