Lixiaokeng
b7f6e0cc00
scsi: libiscsi: Fix UAF in iscsi_conn_get_param()/iscsi_conn_teardown()
[ Upstream commit 1b8d0300a3e9f216ae4901bab886db7299899ec6 ]
|- iscsi_if_destroy_conn |-dev_attr_show
|-iscsi_conn_teardown
|-spin_lock_bh |-iscsi_sw_tcp_conn_get_param
|-kfree(conn->persistent_address) |-iscsi_conn_get_param
|-kfree(conn->local_ipaddr)
==>|-read persistent_address
==>|-read local_ipaddr
|-spin_unlock_bh
When iscsi_conn_teardown() and iscsi_conn_get_param() happen in parallel, a
UAF may be triggered.
Link: https://lore.kernel.org/r/046ec8a0-ce95-d3fc-3235-666a7c65b224@huawei.com
Reported-by: Lu Tixiong <lutianxiong@huawei.com>
Reviewed-by: Mike Christie <michael.christie@oracle.com>
Reviewed-by: Lee Duncan <lduncan@suse.com>
Signed-off-by: Lixiaokeng <lixiaokeng@huawei.com>
Signed-off-by: Linfeilong <linfeilong@huawei.com>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-01-11 13:57:37 +01:00
..
2020-10-01 13:12:37 +02:00
2021-07-28 11:12:15 +02:00
2019-02-12 19:46:13 +01:00
2020-08-21 09:48:08 +02:00
2021-07-20 16:17:55 +02:00
2020-01-14 20:05:46 +01:00
2021-03-03 18:22:50 +01:00
2021-07-20 16:17:49 +02:00
2021-11-26 11:40:33 +01:00
2021-07-20 16:17:49 +02:00
2019-02-12 19:46:12 +01:00
2021-08-26 08:37:07 -04:00
2020-01-23 08:20:36 +01:00
2020-09-03 11:22:27 +02:00
2020-12-29 13:47:00 +01:00
2020-06-11 09:22:55 +02:00
2021-02-07 14:47:41 +01:00
2018-10-20 09:48:50 +02:00
2019-12-01 09:13:29 +01:00
2021-07-28 11:12:15 +02:00
2021-06-03 08:36:25 +02:00
2022-01-05 12:33:48 +01:00
2021-08-26 08:37:07 -04:00
2021-12-08 08:46:49 +01:00
2018-05-25 16:17:50 +02:00
2018-01-02 20:31:05 +01:00
2017-11-02 11:10:55 +01:00
2020-12-29 13:46:59 +01:00
2020-01-09 10:17:58 +01:00
2021-09-22 11:45:26 +02:00
2021-11-26 11:40:35 +01:00
2020-10-29 09:07:04 +01:00
2019-06-25 11:36:53 +08:00
2017-11-02 11:10:55 +01:00
2019-11-20 17:59:54 +01:00
2021-01-30 13:31:13 +01:00
2018-09-19 22:43:42 +02:00
2018-09-19 22:43:42 +02:00
2018-09-19 22:43:42 +02:00
2019-03-13 14:03:15 -07:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:10 -04:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:10 -04:00
2017-11-02 11:10:55 +01:00
2021-11-26 11:40:38 +01:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-08-24 22:29:07 -04:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2020-01-04 13:59:44 +01:00
2017-11-02 11:10:55 +01:00
2021-09-22 11:45:32 +02:00
2021-06-03 08:36:22 +02:00
2019-10-29 09:17:32 +01:00
2017-11-02 11:10:55 +01:00
2021-11-26 11:40:32 +01:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:12 -04:00
2018-11-13 11:14:56 -08:00
2018-11-13 11:14:56 -08:00
2017-08-25 17:21:10 -04:00
2017-08-25 17:21:10 -04:00
2021-07-20 16:17:40 +02:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2020-09-09 19:03:12 +02:00
2017-08-25 17:21:10 -04:00
2017-11-02 11:10:55 +01:00
2021-10-27 09:51:41 +02:00
2019-07-10 09:54:35 +02:00
2020-11-18 18:27:55 +01:00
2018-08-15 18:12:47 +02:00
2017-08-25 17:21:10 -04:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2020-04-02 16:34:27 +02:00
2020-04-02 16:34:27 +02:00
2019-12-01 09:13:27 +01:00
2020-06-25 15:41:56 +02:00
2020-02-28 16:36:04 +01:00
2021-05-22 10:57:31 +02:00
2019-11-10 11:25:11 +01:00
2017-08-22 16:34:36 +02:00
2022-01-11 13:57:37 +01:00
2017-11-02 11:10:55 +01:00
2018-11-13 11:14:56 -08:00
2020-01-04 13:59:44 +01:00
2017-11-02 11:10:55 +01:00
2019-10-29 09:16:53 +01:00
2017-11-02 11:10:55 +01:00
2020-08-21 09:48:10 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2020-10-29 09:07:16 +01:00
2020-01-04 13:59:48 +01:00
2019-11-20 18:00:48 +01:00
2017-11-02 11:10:55 +01:00
2017-09-01 11:59:17 +02:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-08-24 22:29:01 -04:00
2017-11-02 11:10:55 +01:00
2017-08-24 22:29:05 -04:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:11 -04:00
2017-11-02 11:10:55 +01:00
2017-08-25 17:21:11 -04:00
2017-08-28 22:15:46 -04:00
2017-11-02 11:10:55 +01:00
2019-05-16 19:42:27 +02:00
2017-11-02 11:10:55 +01:00
2021-12-22 09:18:01 +01:00
2017-12-20 10:10:20 +01:00
2020-06-30 15:37:57 -04:00
2019-05-08 07:20:49 +02:00
2019-10-29 09:17:31 +01:00
2017-08-25 17:08:07 -04:00
2017-11-02 11:10:55 +01:00
2021-07-20 16:17:41 +02:00
2019-10-07 18:55:06 +02:00
2017-11-02 11:10:55 +01:00
2019-01-23 08:09:48 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2021-08-26 08:37:07 -04:00
2021-11-12 14:28:22 +01:00
2020-01-23 08:20:37 +01:00
2017-11-02 11:10:55 +01:00
2017-10-11 14:33:12 -04:00
2021-12-08 08:46:54 +01:00
2017-08-29 21:51:45 -04:00
2020-07-29 07:42:51 +02:00
2021-04-28 12:08:40 +02:00
2021-11-12 14:28:22 +01:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2018-07-25 11:25:06 +02:00
2021-10-09 14:09:46 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2021-10-17 10:08:34 +02:00
2020-05-20 08:17:06 +02:00
2017-08-25 17:21:10 -04:00
2021-05-22 10:57:31 +02:00
2018-05-30 07:51:49 +02:00
2017-11-02 11:10:55 +01:00
2021-08-15 13:03:28 +02:00
2017-11-02 11:10:55 +01:00
2017-11-02 11:10:55 +01:00
2021-04-07 12:47:01 +02:00
2017-11-02 11:10:55 +01:00
2019-05-08 07:20:50 +02:00
2020-01-04 13:59:44 +01:00
2021-05-22 10:57:31 +02:00
2021-10-17 10:08:34 +02:00
2022-01-05 12:33:49 +01:00
2017-08-25 17:21:10 -04:00
2017-11-02 11:10:55 +01:00
2018-08-24 13:09:01 +02:00
2017-08-22 16:34:36 +02:00