linux-stable/virt
Dan Carpenter a0f1d21c1c KVM: use after free in kvm_ioctl_create_device()
We should move the ops->destroy(dev) after the list_del(&dev->vm_node)
so that we don't use "dev" after freeing it.

Fixes: a28ebea2ad ("KVM: Protect device ops->create and list_add with kvm->lock")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: David Hildenbrand <david@redhat.com>
Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>
2016-12-01 16:10:50 +01:00
..
kvm KVM: use after free in kvm_ioctl_create_device() 2016-12-01 16:10:50 +01:00
lib irqbypass: Disallow NULL token 2016-05-11 22:37:54 +02:00
Makefile virt: Add virt directory to the top Makefile 2015-10-01 15:06:44 +02:00