Leon Romanovsky 751e8b062a RDMA/core: Fix race between destroy and release FD object ... commit f0abc761bbb9418876cc4d1ebc473e4ea6352e42 upstream. The call to ->lookup_put() was too early and it caused an unlock of the read/write protection of the uobject after the FD was put. This allows a race: CPU1 CPU2 rdma_lookup_put_uobject() lookup_put_fd_uobject() fput() fput() uverbs_uobject_fd_release() WARN_ON(uverbs_try_lock_object(uobj, UVERBS_LOOKUP_WRITE)); atomic_dec(usecnt) Fix the code by changing the order, first unlock and call to ->lookup_put() after that. Fixes: 3832125624 ("IB/core: Add support for idr types") Link: https://lore.kernel.org/r/20200423060122.6182-1-leon@kernel.org Suggested-by: Jason Gunthorpe <jgg@mellanox.com> Signed-off-by: Leon Romanovsky <leonro@mellanox.com> Signed-off-by: Jason Gunthorpe <jgg@mellanox.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-05-06 08:13:30 +02:00
..
core	RDMA/core: Fix race between destroy and release FD object	2020-05-06 08:13:30 +02:00
hw	RDMA/mlx4: Initialize ib_spec on the stack	2020-05-06 08:13:30 +02:00
sw	net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup	2020-04-29 16:31:17 +02:00
ulp	scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout"	2020-02-28 16:38:58 +01:00
Kconfig	IB/ucm: fix UCM link error	2018-08-21 16:56:32 -06:00
Makefile	IB/rdmavt: Create module framework and handle driver registration	2016-03-10 20:37:04 -05:00