Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit e2b34835 authored by Steffen Klassert's avatar Steffen Klassert Committed by Linus Torvalds
Browse files

crypto: pcrypt - Fix use after free on padata_free 



kobject_put is called from padata_free for the padata kobject.
The kobject's release function frees the padata instance,
so don't call kobject_put for the padata kobject from pcrypt.

Reported-and-tested-by: default avatarRandy Dunlap <randy.dunlap@oracle.com>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: default avatarLinus Torvalds <torvalds@linux-foundation.org>
parent bd760e1e

crypto/pcrypt.c

+0 −1
Original line number Diff line number Diff line
@@ -504,7 +504,6 @@ static int pcrypt_init_padata(struct padata_pcrypt *pcrypt, 


static void pcrypt_fini_padata(struct padata_pcrypt *pcrypt)

{

	kobject_put(&pcrypt->pinst->kobj);

	free_cpumask_var(pcrypt->cb_cpumask->mask);

	kfree(pcrypt->cb_cpumask);