diff options
| author | Alexandra Winter <wintera@linux.ibm.com> | 2026-09-02 16:37:33 +0200 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-09-04 16:12:36 -0700 |
| commit | 907a56ab3eb8a58500a58daa76087f17bb2b6826 (patch) | |
| tree | 257860ede5dc6518ced980ed654adebd92e35ca5 /scripts | |
| parent | 1668a31e3b1ad358d981ddb6dbd3db1fe0533621 (diff) | |
| download | linux-907a56ab3eb8a58500a58daa76087f17bb2b6826.tar.gz linux-907a56ab3eb8a58500a58daa76087f17bb2b6826.zip | |
s390/ism: folio_put() after error
dmb->cpu_addr was allocated via folio_alloc(). Use folio_put() instead of
kfree() in the error exit of ism_alloc_dmb() to avoid slab allocator
corruption.
While at it, reset dmb->cpu_addr after folio_put to avoid unintentional UAF
by future callers.
Fixes: 83781384a96b ("s390/ism: Properly fix receive message buffer allocation")
Signed-off-by: Alexandra Winter <wintera@linux.ibm.com>
Reviewed-by: Gerd Bayer <gbayer@linux.ibm.com>
Link: https://patch.msgid.link/20260902143733.433574-1-wintera@linux.ibm.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions