[PATCH] PCI: xgene-msi: Fix a potential UAF in xgene_msi_probe
dinghao.liu at zju.edu.cn
dinghao.liu at zju.edu.cn
Sat Sep 30 02:56:29 PDT 2023
> On Tue, 26 Sep 2023 03:59:36 +0100,
> Dinghao Liu <dinghao.liu at zju.edu.cn> wrote:
> >
> > xgene_allocate_domains() will call irq_domain_remove() to free
> > msi->inner_domain on failure. However, its caller, xgene_msi_probe(),
> > will also call irq_domain_remove() through xgene_msi_remove() on the
> > same failure, which may lead to a use-after-free. Remove the first
> > irq_domain_remove() and let xgene_free_domains() cleanup domains.
> >
> > Fixes: dcd19de36775 ("PCI: xgene: Add APM X-Gene v1 PCIe MSI/MSIX termination driver")
> > Signed-off-by: Dinghao Liu <dinghao.liu at zju.edu.cn>
> > ---
> >
> > Changelog:
> >
> > v2: -Remove irq_domain_remove() instead of nulling msi_domain.
>
> Unfortunately, your email doesn't indicate this is v2.
Sorry, my mistake. I will resend a new patch soon.
Regards,
Dinghao
More information about the linux-arm-kernel
mailing list