| commit | 9a0467e1f67155c126e5857b1d3ae2ac8b009aa5 | [log] [tgz] |
|---|---|---|
| author | Al Viro <viro@zeniv.linux.org.uk> | Wed Apr 10 14:03:45 2019 -0400 |
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | Sat May 25 18:23:42 2019 +0200 |
| tree | 53b91cdfee09ea22f821e502407458970b55cde6 | |
| parent | 900bf351dd8467ef0354312eedad8811d16ea507 [diff] |
securityfs: fix use-after-free on symlink traversal [ Upstream commit 46c874419652bbefdfed17420fd6e88d8a31d9ec ] symlink body shouldn't be freed without an RCU delay. Switch securityfs to ->destroy_inode() and use of call_rcu(); free both the inode and symlink body in the callback. Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> Signed-off-by: Sasha Levin <sashal@kernel.org>