Skip to content

blk-cgroup: fix use-after-free in blkg_conf_open_bdev - #1143

Open
blktests-ci-kpd[bot] wants to merge 1 commit into
linus-master_basefrom
series/1146329=>linus-master
Open

blk-cgroup: fix use-after-free in blkg_conf_open_bdev#1143
blktests-ci-kpd[bot] wants to merge 1 commit into
linus-master_basefrom
series/1146329=>linus-master

Conversation

@blktests-ci-kpd

@blktests-ci-kpd blktests-ci-kpd Bot commented Aug 14, 2026

Copy link
Copy Markdown

Pull request for series with
subject: blk-cgroup: fix use-after-free in blkg_conf_open_bdev
version: 1
url: https://patchwork.kernel.org/project/linux-block/list/?series=1146329

@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 14, 2026

Copy link
Copy Markdown
Author

Upstream branch: 3aa1dca
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the linus-master_base branch 2 times, most recently from d89ab11 to fdba928 Compare August 16, 2026 18:34
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 16, 2026

Copy link
Copy Markdown
Author

Upstream branch: fd923b3
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 4c1f92f to 4c01fef Compare August 16, 2026 19:52
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 17, 2026

Copy link
Copy Markdown
Author

Upstream branch: 8d3ae59
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 4c01fef to aae5820 Compare August 17, 2026 16:40
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 19, 2026

Copy link
Copy Markdown
Author

Upstream branch: bd5f485
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from aae5820 to ba854f7 Compare August 19, 2026 05:45
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 25, 2026

Copy link
Copy Markdown
Author

Upstream branch: 66498c7
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from ba854f7 to f824259 Compare August 25, 2026 03:49
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 26, 2026

Copy link
Copy Markdown
Author

Upstream branch: 502d457
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from f824259 to 4d3cf2a Compare August 26, 2026 21:08
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 29, 2026

Copy link
Copy Markdown
Author

Upstream branch: cf72cbb
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 4d3cf2a to aa0883f Compare August 29, 2026 07:07
@blktests-ci-kpd

blktests-ci-kpd Bot commented Aug 31, 2026

Copy link
Copy Markdown
Author

Upstream branch: cee9395
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from aa0883f to 6139bb4 Compare August 31, 2026 10:54
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 2, 2026

Copy link
Copy Markdown
Author

Upstream branch: 89a3129
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 6139bb4 to 31b0812 Compare September 2, 2026 09:26
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 4, 2026

Copy link
Copy Markdown
Author

Upstream branch: bc35965
series: https://patchwork.kernel.org/project/linux-block/list/?series=1146329
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 31b0812 to 9c8efe4 Compare September 4, 2026 06:40
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 7, 2026

Copy link
Copy Markdown
Author

Upstream branch: df29080
series: https://patchwork.kernel.org/series/1146329/
version: 1

Pull request is NOT updated. Failed to apply https://patchwork.kernel.org/series/1146329/
error message:

Cmd('git') failed due to: exit code(128)
  cmdline: git am --3way
  stdout: 'Patch is empty.
When you have resolved this problem, run "git am --continue".
If you prefer to skip this patch, run "git am --skip" instead.
To record the empty patch as an empty commit, run "git am --allow-empty".
To restore the original branch and stop patching, run "git am --abort".'

conflict:

@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 8, 2026

Copy link
Copy Markdown
Author

Upstream branch: 28924df
series: https://patchwork.kernel.org/series/1146329/
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 9c8efe4 to f31d69b Compare September 8, 2026 16:30
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 9, 2026

Copy link
Copy Markdown
Author

Upstream branch: 893e117
series: https://patchwork.kernel.org/series/1146329/
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from f31d69b to edcc452 Compare September 9, 2026 08:25
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 10, 2026

Copy link
Copy Markdown
Author

Upstream branch: 50d05c7
series: https://patchwork.kernel.org/series/1146329/
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from edcc452 to 11f42fb Compare September 10, 2026 15:56
@shuangpeng-kernel kernel-patches-daemon
blk-cgroup: fix use-after-free in blkg_conf_open_bdev
d2a5b66 
blkg_conf_open_bdev() holds rq_qos_mutex while checking whether the disk is
still live. On the dead-disk error path, it drops the bdev reference before
unlocking the mutex.

Once that reference is dropped, a concurrent put_disk() can release the
remaining device reference and free the bdev. The subsequent mutex_unlock()
then dereferences bdev->bd_queue from the freed object.

Unlock rq_qos_mutex while the local bdev reference still pins the object.
Drop the reference only after the final bdev access.

Fixes: a13bd91 ("block/rq_qos: protect rq_qos apis with a new lock")
Cc: stable@vger.kernel.org
Signed-off-by: Shuangpeng Bai <shuangpeng.kernel@gmail.com>
@blktests-ci-kpd

blktests-ci-kpd Bot commented Sep 12, 2026

Copy link
Copy Markdown
Author

Upstream branch: 5225b8e
series: https://patchwork.kernel.org/series/1146329/
version: 1

@blktests-ci-kpd
blktests-ci-kpd Bot force-pushed the series/1146329=>linus-master branch from 11f42fb to d2a5b66 Compare September 12, 2026 02:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

linus-master new V1

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@shuangpeng-kernel