Leon Romanovsky 0cba0efcc7 RDMA/restrack: Increment CQ restrack object before committing ... Once the uobj is committed it is immediately possible another thread could destroy it, which worst case, can result in a use-after-free of the restrack objects. Cc: syzkaller <syzkaller@googlegroups.com> Fixes: 08f294a152 ("RDMA/core: Add resource tracking for create and destroy CQs") Reported-by: Noa Osherovich <noaos@mellanox.com> Signed-off-by: Leon Romanovsky <leonro@mellanox.com> Signed-off-by: Jason Gunthorpe <jgg@mellanox.com>		2018-02-15 15:31:26 -07:00
..
core	RDMA/restrack: Increment CQ restrack object before committing	2018-02-15 15:31:26 -07:00
hw	vfs: do bulk POLL* -> EPOLL* replacement	2018-02-11 14:34:03 -08:00
sw	Second pull request for 4.16 merge window	2018-02-06 11:09:45 -08:00
ulp	IB/ipoib: Do not warn if IPoIB debugfs doesn't exist	2018-02-15 14:59:43 -07:00
Kconfig	Second pull request for 4.16 merge window	2018-02-06 11:09:45 -08:00
Makefile	IB/rdmavt: Create module framework and handle driver registration	2016-03-10 20:37:04 -05:00