Files
linux/drivers
Eric Auger 4c80ba392b iommu: fix KASAN use-after-free in iommu_insert_resv_region
In case the new region gets merged into another one, the nr list node is
freed.  Checking its type while completing the merge algorithm leads to
a use-after-free.  Use new->type instead.

Fixes: 4dbd258ff6 ("iommu: Revisit iommu_insert_resv_region() implementation")
Signed-off-by: Eric Auger <eric.auger@redhat.com>
Reported-by: Qian Cai <cai@lca.pw>
Reviewed-by: Jerry Snitselaar <jsnitsel@redhat.com>
Cc: Stable <stable@vger.kernel.org> #v5.3+
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2019-12-16 08:58:42 -08:00
..
2019-11-22 11:16:26 +05:30
2019-12-10 23:15:09 +01:00
2019-12-09 10:36:44 -08:00
2019-12-09 10:36:44 -08:00
2019-12-09 10:36:44 -08:00
2019-11-22 19:56:35 +00:00
2019-12-09 10:36:44 -08:00
2019-12-05 13:18:54 -08:00
2019-11-14 13:06:33 +08:00