Alexandra Winter b1896543ce s390/ism: Fix UAF of sba and ieq during ism_dev_exit() ...

A ism interrupt handler can be active in parallel with ism_dev_exit(),
accessing freed data structures.

No new interrupts will be generated after unregister_ieq(). Drain ongoing
interrupt handlers by free_irq(), before freeing ism data structures.

Fixes: 684b89bc39 ("s390/ism: add device driver for internal shared memory")
Signed-off-by: Alexandra Winter <wintera@linux.ibm.com>
Link: https://patch.msgid.link/20260805131043.954639-1-wintera@linux.ibm.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>

2026-08-06 09:28:33 -07:00

..

ctcm_dbug.c

s390/ctcm: Convert sprintf/snprintf to scnprintf

2023-06-23 11:55:55 +02:00

ctcm_dbug.h

s390/ctcm: add __printf format attribute to ctcm_dbf_longtext

2021-11-19 11:12:30 +00:00

ctcm_fsms.c

Merge tag 'net-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2025-12-03 17:24:33 -08:00

ctcm_fsms.h

s390/ctcm: remove orphaned function declarations

2020-10-02 16:22:49 -07:00

ctcm_main.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ctcm_main.h

s390/ctcm: Convert sprintf/snprintf to scnprintf

2023-06-23 11:55:55 +02:00

ctcm_mpc.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

ctcm_mpc.h

s390/ctcm: remove orphaned function declarations

2020-10-02 16:22:49 -07:00

ctcm_sysfs.c

s390: Remove KMSG_COMPONENT macro

2025-11-24 11:45:21 +01:00

fsm.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

fsm.h

…

ism_drv.c

s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

2026-08-06 09:28:33 -07:00

ism.h

dibs: Move event handling to dibs layer

2025-09-23 11:13:22 +02:00

Kconfig

dibs: Move event handling to dibs layer

2025-09-23 11:13:22 +02:00

Makefile

s390/net: Remove NETIUCV device driver

2025-07-16 17:53:40 -07:00

qeth_core_main.c

s390/qeth: validate user buffer length in SNMP and ARP query ioctls

2026-08-03 18:31:05 -07:00

qeth_core_mpc.c

s390/qeth: Handle ambiguous OSA RCs in s390dbf

2025-11-17 20:02:02 -08:00

qeth_core_mpc.h

s390/qeth: Handle ambiguous OSA RCs in s390dbf

2025-11-17 20:02:02 -08:00

qeth_core_sys.c

s390: Remove KMSG_COMPONENT macro

2025-11-24 11:45:21 +01:00

qeth_core.h

inet: introduce dst_rtable() helper

2024-04-30 18:32:38 -07:00

qeth_ethtool.c

s390: Remove KMSG_COMPONENT macro

2025-11-24 11:45:21 +01:00

qeth_l2_main.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

qeth_l2_sys.c

s390/qeth: Convert sysfs sprintf to sysfs_emit

2023-02-10 19:49:53 -08:00

qeth_l2.h

s390/qeth: use dev->groups for common sysfs attributes

2020-12-07 06:55:21 -08:00

qeth_l3_main.c

s390/qeth: validate user buffer length in SNMP and ARP query ioctls

2026-08-03 18:31:05 -07:00

qeth_l3_sys.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

qeth_l3.h

s390/qeth: use dev->groups for common sysfs attributes

2020-12-07 06:55:21 -08:00

smsgiucv_app.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

smsgiucv.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

smsgiucv.h

…