]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
securityfs: fix use-after-free on symlink traversal
authorAl Viro <viro@zeniv.linux.org.uk>
Wed, 10 Apr 2019 18:03:45 +0000 (14:03 -0400)
committerKleber Sacilotto de Souza <kleber.souza@canonical.com>
Wed, 14 Aug 2019 09:18:49 +0000 (11:18 +0200)
commitd88b531930073626d300edf071f2f814e49a220d
tree54fe1de75972b88b1350cee0a0338ef74b5d365d
parent58560a09c483ac0bf19931015c4c73ddcfb2e339
securityfs: fix use-after-free on symlink traversal

BugLink: https://bugs.launchpad.net/bugs/1838576
[ Upstream commit 46c874419652bbefdfed17420fd6e88d8a31d9ec ]

symlink body shouldn't be freed without an RCU delay.  Switch securityfs
to ->destroy_inode() and use of call_rcu(); free both the inode and symlink
body in the callback.

Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Khalid Elmously <khalid.elmously@canonical.com>
security/inode.c