On Wed, Jan 09, 2013 at 09:22:46PM +0100, Borislav Petkov wrote:
> From: Konstantin Khlebnikov <[email protected]>
> Date: Fri, 14 Dec 2012 15:03:10 +0400
> Subject: [PATCH] EDAC: Fix kernel panic on module unloading
> 
> Upstream commit: 311bd84247ee0bedae6cdfbfc5e2c3450f9decd1
> 
> This patch fixes use-after-free and double-free bugs in
> edac_mc_sysfs_exit(). mci_pdev has single reference and put_device()
> calls mc_attr_release() which calls kfree(). The following
> device_del() works with already released memory. An another kfree() in
> edac_mc_sysfs_exit() releses the same memory again. Great.
> 
> Signed-off-by: Konstantin Khlebnikov <[email protected]>
> Cc: [email protected] # 3.[67]
> Cc: Denis Kirjanov <[email protected]>
> Cc: Mauro Carvalho Chehab <[email protected]>
> Link: http://lkml.kernel.org/r/20121214110310.11019.21098.stgit@zurg
> [ a partial 3.6.y backport ]

3.6 is now end-of-life so there's nothing I can do with this patch,
sorry.

greg k-h
--
To unsubscribe from this list: send the line "unsubscribe stable" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to