Re: [PATCH net] vhost-vsock: fix use after free

From: Sergei Shtylyov
Date: Thu Sep 27 2018 - 05:52:59 EST


Hello!

On 9/27/2018 11:43 AM, Jason Wang wrote:

Just a couple of typos...

The access of vsock is not protected by vhost_vsock_lock. This may
lead use after free since vhost_vsock_dev_release() may free the

Lead to use.

pointer at the same time.

Fix this by holding the lock during the acess.

Access.

Reported-by: syzbot+e3e074963495f92a89ed@xxxxxxxxxxxxxxxxxxxxxxxxx
Fixes: 16320f363ae1 ("vhost-vsock: add pkt cancel capability")
Fixes: 433fc58e6bf2 ("VSOCK: Introduce vhost_vsock.ko")
Cc: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
[...]

MBR, Sergei