diff options
| author | Pavel Begunkov <asml.silence@gmail.com> | 2026-02-14 22:19:32 +0000 |
|---|---|---|
| committer | Sasha Levin <sashal@kernel.org> | 2026-03-04 07:21:32 -0500 |
| commit | f1ae403324311e143ef20e53cf9a5f01e312f7c9 (patch) | |
| tree | 32cd8e9a2bcc7e5fd02e4893969befb3798ba1d3 /include/net/aligned_data.h | |
| parent | bcf40ce4666507703216de00a45e56155cc56f4e (diff) | |
io_uring/zcrx: fix sgtable leak on mapping failures
[ Upstream commit a983aae397767e9da931128ff2b5bf9066513ce3 ]
In an unlikely case when io_populate_area_dma() fails, which could only
happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine,
io_zcrx_map_area() will have an initialised and not freed table. It was
supposed to be cleaned up in the error path, but !is_mapped prevents
that.
Fixes: 439a98b972fbb ("io_uring/zcrx: deduplicate area mapping")
Cc: stable@vger.kernel.org
Reported-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
Diffstat (limited to 'include/net/aligned_data.h')
0 files changed, 0 insertions, 0 deletions