------- Comment From niklas.schne...@ibm.com 2021-10-29 06:01 EDT-------
Ok, so for focal master-next we didn't yet have the earlier commits

2a671f77ee49 ("s390/pci: fix use after free of zpci_dev")
0b13525c20fe ("s390/pci: fix leak of PCI device structure")

so I had to backport those in addition to

a46044a92add s390/pci: fix zpci_zdev_put() on reserve

That said I tested first with the current focal kernel and similar to what I 
mentioned on the stable list for v5.10.x[0] the original scenario that caused 
the crash does not cause a crash there. I think this is due to the common code 
not
keeping a reference to function 0 around after it is removed. I guess this is
also why this was never seen during the initial multi-function support 
development.  However even if I don't know how to trigger the problem on focal 
it is still there. Should some code keep a reference to the PCI device after 
removal we would run
into the same crash trying to access it. We also do still leak the PCI device
structure on removal without these patches.

[0]
https://lore.kernel.org/stable/31dcc776244843aa76deebd49f4ba3fbe4819990.ca...@linux.ibm.com/

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1943464

Title:
  Reassign I/O Path of ConnectX-5 Port 1 before Port 2 causes NULL
  dereference

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1943464/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to