mirror_ubuntu-kernels/drivers/infiniband
Saravanan Vajravel 699826f4e3 IB/isert: Fix incorrect release of isert connection
The ib_isert module is releasing the isert connection both in
isert_wait_conn() handler as well as isert_free_conn() handler.
In isert_wait_conn() handler, it is expected to wait for iSCSI
session logout operation to complete. It should free the isert
connection only in isert_free_conn() handler.

When a bunch of iSER target is cleared, this issue can lead to
use-after-free memory issue as isert conn is twice released

Fixes: b02efbfc9a ("iser-target: Fix implicit termination of connections")
Reviewed-by: Sagi Grimberg <sagi@grimberg.me>
Signed-off-by: Saravanan Vajravel <saravanan.vajravel@broadcom.com>
Signed-off-by: Selvin Xavier <selvin.xavier@broadcom.com>
Link: https://lore.kernel.org/r/20230606102531.162967-4-saravanan.vajravel@broadcom.com
Signed-off-by: Leon Romanovsky <leon@kernel.org>
2023-06-11 20:29:34 +03:00
..
core IB/uverbs: Fix to consider event queue closing also upon non-blocking mode 2023-06-11 11:27:12 +03:00
hw RDMA/mlx5: Fix affinity assignment 2023-06-11 11:27:17 +03:00
sw RDMA/rxe: Fix the use-before-initialization error of resp_pkts 2023-06-09 13:22:58 -03:00
ulp IB/isert: Fix incorrect release of isert connection 2023-06-11 20:29:34 +03:00
Kconfig RDMA: Disable IB HW for UML 2022-12-04 15:22:03 +02:00
Makefile treewide: Add SPDX license identifier - Makefile/Kconfig 2019-05-21 10:50:46 +02:00