Paolo Bonzini 1186a6ea75 KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer ... commit 9432a3175770e06cb83eada2d91fac90c977cb99 upstream. A comment warning against this bug is there, but the code is not doing what the comment says. Therefore it is possible that an EPOLLHUP races against irq_bypass_register_consumer. The EPOLLHUP handler schedules irqfd_shutdown, and if that runs soon enough, you get a use-after-free. Reported-by: syzbot <syzkaller@googlegroups.com> Cc: stable@vger.kernel.org Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> Reviewed-by: David Hildenbrand <david@redhat.com> Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-08-24 13:27:00 +02:00
..
arm	KVM: arm/arm64: Fix occasional warning from the timer work function	2017-12-09 18:42:42 +01:00
async_pf.c	KVM: async_pf: do not warn on page allocation failures	2016-03-03 15:07:29 -08:00
async_pf.h	KVM: fix checkpatch.pl errors in kvm/async_pf.h	2015-06-19 17:16:25 +02:00
coalesced_mmio.c	KVM: move iodev.h from virt/kvm/ to include/kvm	2015-03-26 21:43:12 +00:00
coalesced_mmio.h	KVM: make the declaration of functions within 80 characters	2015-09-14 18:43:19 +02:00
eventfd.c	KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer	2018-08-24 13:27:00 +02:00
irqchip.c	KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi	2016-06-24 10:18:18 -07:00
Kconfig	KVM: don't pointlessly leave KVM_COMPAT=y in non-KVM configs	2015-11-04 16:24:30 +01:00
kvm_main.c	KVM: mmu: Fix overlap between public and private memslots	2018-03-11 16:19:45 +01:00
vfio.c	vfio: New external user group/file match	2017-07-27 15:06:07 -07:00
vfio.h	kvm: vfio: fix unregister kvm_device_ops of vfio	2014-10-24 13:30:47 +02:00