Hangyu Hua ce5a6df21a fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() ... commit 7f8ed28d14 upstream. fuse_dax_conn_free() will be called when fuse_fill_super_common() fails after fuse_dax_conn_alloc(). Then deactivate_locked_super() in virtio_fs_get_tree() will call virtio_kill_sb() to release the discarded superblock. This will call fuse_dax_conn_free() again in fuse_conn_put(), resulting in a possible double free. Fixes: 1dd539577c ("virtiofs: add a mount option to enable dax") Signed-off-by: Hangyu Hua <hbh25y@gmail.com> Acked-by: Vivek Goyal <vgoyal@redhat.com> Reviewed-by: Jingbo Xu <jefflexu@linux.alibaba.com> Cc: <stable@vger.kernel.org> # v5.10 Signed-off-by: Miklos Szeredi <mszeredi@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-12-20 17:01:52 +01:00
..
acl.c	fs.idmapped.v6.3	2023-02-20 11:53:11 -08:00
control.c	fuse: convert to ctime accessor functions	2023-07-24 10:29:59 +02:00
cuse.c	driver core: class: remove module * from class_create()	2023-03-17 15:16:33 +01:00
dax.c	fuse: dax: set fc->dax to NULL in fuse_dax_conn_free()	2023-12-20 17:01:52 +01:00
dev.c	fuse_dev_ioctl(): switch to fdget()	2023-04-20 22:55:35 -04:00
dir.c	fuse update for 6.6	2023-09-05 12:45:55 -07:00
file.c	fuse: disable FOPEN_PARALLEL_DIRECT_WRITES with FUSE_DIRECT_IO_ALLOW_MMAP	2023-12-20 17:01:51 +01:00
fuse_i.h	fuse: share lookup state between submount and its parent	2023-12-20 17:01:51 +01:00
inode.c	fuse: share lookup state between submount and its parent	2023-12-20 17:01:51 +01:00
ioctl.c	fuse: ioctl: translate ENOSYS in outarg	2023-06-21 11:17:36 +02:00
Kconfig	dax: remove CONFIG_DAX_DRIVER	2021-12-04 08:58:51 -08:00
Makefile	fuse: move ioctl to separate source file	2021-04-12 15:04:30 +02:00
readdir.c	fuse: cache btime	2023-08-21 12:14:59 +02:00
virtio_fs.c	dax: enable dax fault handler to report VM_FAULT_HWPOISON	2023-06-26 07:54:23 -06:00
xattr.c	fs.idmapped.v6.3	2023-02-20 11:53:11 -08:00