https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=264650
Bug ID: 264650
Summary: RDMA/ucma: Fix use-after-free access in ucma_close
Product: Base System
Version: Unspecified
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: kern
Assignee: [email protected]
Reporter: [email protected]
Created attachment 234656
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=234656&action=edit
a possible patch
The error in ucma_create_id() left ctx in the list of contexts belong
to ucma file descriptor. The attempt to close this file descriptor causes
to use-after-free accesses while iterating over such list.
--
You are receiving this mail because:
You are the assignee for the bug.
