Ming Lei ee18012c80 block: avoid to reuse hctx not removed from cpuhp callback list ...

commit 85672ca9ceeaa1dcf2777a7048af5f4aee3fd02b upstream.

If the 'hctx' isn't removed from cpuhp callback list, we can't reuse it,
otherwise use-after-free may be triggered.

Reported-by: kernel test robot <oliver.sang@intel.com>
Closes: https://lore.kernel.org/oe-lkp/202412172217.b906db7c-lkp@intel.com
Tested-by: kernel test robot <oliver.sang@intel.com>
Fixes: 22465bbac53c ("blk-mq: move cpuhp callback registering out of q->sysfs_lock")
Signed-off-by: Ming Lei <ming.lei@redhat.com>
Link: https://lore.kernel.org/r/20241218101617.3275704-3-ming.lei@redhat.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-01-02 10:32:11 +01:00

..

partitions

block: fix potential invalid pointer dereference in blk_add_partition

2024-10-04 16:29:01 +02:00

badblocks.c

…

bdev.c

block: Provide bdev_open_* functions

2024-03-26 18:19:40 -04:00

bfq-cgroup.c

…

bfq-iosched.c

block, bfq: fix bfqq uaf in bfq_limit_depth()

2024-12-09 10:33:00 +01:00

bfq-iosched.h

…

bfq-wf2q.c

…

bio-integrity.c

block: initialize integrity buffer to zero before writing it to media

2024-08-03 08:53:20 +02:00

bio.c

block: Fix page refcounts for unaligned buffers in __bio_release_pages()

2024-04-03 15:28:27 +02:00

blk-cgroup-fc-appid.c

…

blk-cgroup-rwstat.c

…

blk-cgroup-rwstat.h

…

blk-cgroup.c

blk-cgroup: Fix UAF in blkcg_unpin_online()

2024-12-19 18:11:22 +01:00

blk-cgroup.h

block: fix q->blkg_list corruption during disk rebind

2024-04-17 11:19:28 +02:00

blk-core.c

block: Fix where bio IO priority gets set

2024-09-30 16:25:12 +02:00

blk-crypto-fallback.c

…

blk-crypto-internal.h

…

blk-crypto-profile.c

…

blk-crypto-sysfs.c

…

blk-crypto.c

…

blk-flush.c

block: fix request.queuelist usage in flush

2024-06-21 14:38:35 +02:00

blk-ia-ranges.c

…

blk-integrity.c

block: remove the blk_flush_integrity call in blk_integrity_unregister

2024-09-08 07:54:47 +02:00

blk-ioc.c

…

blk-iocost.c

blk-iocost: Avoid using clamp() on inuse in __propagate_weights()

2024-12-19 18:11:34 +01:00

blk-iolatency.c

…

blk-ioprio.c

…

blk-ioprio.h

…

blk-lib.c

…

blk-map.c

block: fix sanity checks in blk_rq_map_user_bvec

2024-11-08 16:28:24 +01:00

blk-merge.c

block: fix bio_split_rw_at to take zone_write_granularity into account

2024-12-09 10:31:45 +01:00

blk-mq-cpumap.c

…

blk-mq-debugfs-zoned.c

…

blk-mq-debugfs.c

…

blk-mq-debugfs.h

…

blk-mq-pci.c

…

blk-mq-sched.c

…

blk-mq-sched.h

…

blk-mq-sysfs.c

…

blk-mq-tag.c

block: Fix lockdep warning in blk_mq_mark_tag_wait

2024-08-29 17:33:30 +02:00

blk-mq-virtio.c

…

blk-mq.c

block: avoid to reuse hctx not removed from cpuhp callback list

2025-01-02 10:32:11 +01:00

blk-mq.h

block: fix ordering between checking BLK_MQ_S_STOPPED request adding

2024-12-09 10:32:50 +01:00

blk-pm.c

…

blk-pm.h

…

blk-rq-qos.c

blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race

2024-10-22 15:46:27 +02:00

blk-rq-qos.h

…

blk-settings.c

block: Clear zone limits for a non-zoned stacked queue

2024-04-03 15:28:20 +02:00

blk-stat.c

block: prevent division by zero in blk_rq_stat_sum()

2024-04-13 13:07:37 +02:00

blk-stat.h

…

blk-sysfs.c

…

blk-throttle.c

blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!"

2023-12-20 17:01:55 +01:00

blk-throttle.h

…

blk-timeout.c

…

blk-wbt.c

blk-wbt: Fix detection of dirty-throttled tasks

2024-02-23 09:25:16 +01:00

blk-wbt.h

…

blk-zoned.c

…

blk.h

block: support to account io_ticks precisely

2024-06-12 11:11:35 +02:00

bounce.c

…

bsg-lib.c

…

bsg.c

…

disk-events.c

…

early-lookup.c

…

elevator.c

block: Fix elevator_get_default() checking for NULL q->tag_set

2024-11-17 15:08:56 +01:00

elevator.h

…

fops.c

block: refine the EOF check in blkdev_iomap_begin

2024-06-12 11:11:35 +02:00

genhd.c

block: fix deadlock between sd_remove & sd_release

2024-08-03 08:54:24 +02:00

holder.c

…

ioctl.c

block/ioctl: prefer different overflow check

2024-06-27 13:49:01 +02:00

ioprio.c

…

Kconfig

…

Kconfig.iosched

…

kyber-iosched.c

…

Makefile

…

mq-deadline.c

block/mq-deadline: Fix the tag reservation code

2024-08-03 08:53:22 +02:00

opal_proto.h

block: sed-opal: handle empty atoms when parsing response

2024-03-26 18:19:12 -04:00

sed-opal.c

block: sed-opal: avoid possible wrong address reference in read_sed_opal_key()

2024-06-21 14:38:35 +02:00

t10-pi.c

…