• Benjamin LaHaise's avatar
    aio: fix aio request leak when events are reaped by userspace · f8567a38
    Benjamin LaHaise authored
    The aio cleanups and optimizations by kmo that were merged into the 3.10
    tree added a regression for userspace event reaping.  Specifically, the
    reference counts are not decremented if the event is reaped in userspace,
    leading to the application being unable to submit further aio requests.
    This patch applies to 3.12+.  A separate backport is required for 3.10/3.11.
    This issue was uncovered as part of CVE-2014-0206.
    Signed-off-by: default avatarBenjamin LaHaise <bcrl@kvack.org>
    Cc: stable@vger.kernel.org
    Cc: Kent Overstreet <kmo@daterainc.com>
    Cc: Mateusz Guzik <mguzik@redhat.com>
    Cc: Petr Matousek <pmatouse@redhat.com>
    f8567a38
aio.c 39.6 KB