Skip to content
Snippets Groups Projects
Commit 3e9bf43f authored by Dan Carpenter's avatar Dan Carpenter Committed by Wei Liu
Browse files

Drivers: hv: vmbus: Use after free in __vmbus_open()


The "open_info" variable is added to the &vmbus_connection.chn_msg_list,
but the error handling frees "open_info" without removing it from the
list.  This will result in a use after free.  First remove it from the
list, and then free it.

Fixes: 6f3d791f ("Drivers: hv: vmbus: Fix rescind handling issues")
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Reviewed-by: default avatarAndrea Parri <parri.andrea@gmail.com>
Link: https://lore.kernel.org/r/YHV3XLCot6xBS44r@mwanda


Signed-off-by: default avatarWei Liu <wei.liu@kernel.org>
parent 61d74d8e
No related branches found
No related tags found
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment