Paolo Bonzini 9432a31757 KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer ... A comment warning against this bug is there, but the code is not doing what the comment says. Therefore it is possible that an EPOLLHUP races against irq_bypass_register_consumer. The EPOLLHUP handler schedules irqfd_shutdown, and if that runs soon enough, you get a use-after-free. Reported-by: syzbot <syzkaller@googlegroups.com> Cc: stable@vger.kernel.org Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Reviewed-by: David Hildenbrand <david@redhat.com>		2018-07-18 11:31:27 +02:00
..
arm	KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls	2018-05-15 13:36:53 +02:00
async_pf.c	kvm,async_pf: Use swq_has_sleeper()	2017-09-15 16:57:11 +02:00
async_pf.h	KVM: fix checkpatch.pl errors in kvm/async_pf.h	2015-06-19 17:16:25 +02:00
coalesced_mmio.c	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
coalesced_mmio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
eventfd.c	KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer	2018-07-18 11:31:27 +02:00
irqchip.c	KVM: use rcu access function for irq routing	2017-07-07 15:24:15 +02:00
Kconfig	KVM: introduce kvm_arch_vcpu_async_ioctl	2017-12-14 09:26:59 +01:00
kvm_main.c	kvm: use insert sort in kvm_io_bus_register_dev function	2018-03-06 18:40:44 +01:00
vfio.c	vfio: New external user group/file match	2017-06-28 13:50:05 -06:00
vfio.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00