You have been subscribed to a public bug:
== Comment: #0 - Hendrik Brueckner <brueck...@de.ibm.com> - 2016-05-23 09:09:00
==
Please backport upstream Linux commit ID:
commit dba599091c191d209b1499511a524ad9657c0e5a
Author: Sebastian Ott <seb...@linux.vnet.ibm.com>
Date: Fri Apr 15 09:41:35 2016 +0200
s390/pci: fix use after free in dma_init
After a failure during registration of the dma_table (because of the
function being in error state) we free its memory but don't reset the
associated pointer to zero.
When we then receive a notification from firmware (about the function
being in error state) we'll try to walk and free the dma_table again.
Fix this by resetting the dma_table pointer. In addition to that make
sure that we free the iommu_bitmap when appropriate.
Signed-off-by: Sebastian Ott <seb...@linux.vnet.ibm.com>
Reviewed-by: Gerald Schaefer <gerald.schae...@de.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidef...@de.ibm.com>
** Affects: linux (Ubuntu)
Importance: Undecided
Assignee: Skipper Bug Screeners (skipper-screen-team)
Status: New
** Tags: architecture-s39064 bugnameltc-141691 severity-high
targetmilestone-inin1604
--
s390/pci: fix use after free in dma_init
https://bugs.launchpad.net/bugs/1584828
You received this bug notification because you are a member of Kernel Packages,
which is subscribed to linux in Ubuntu.
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
