diff options
| author | Jens Axboe <axboe@kernel.dk> | 2026-03-12 08:59:25 -0600 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2026-03-19 16:15:25 +0100 |
| commit | 97b57f69fee1b61b41acbf37e7720cac9d389fa4 (patch) | |
| tree | 530cf2e909402ad66b363bafda48f354803f057c /tools/perf/scripts/python/stackcollapse.py | |
| parent | 76965fa1925d3f85bea5873e9f606b0a2da7f069 (diff) | |
io_uring/kbuf: check if target buffer list is still legacy on recycle
commit c2c185be5c85d37215397c8e8781abf0a69bec1f upstream.
There's a gap between when the buffer was grabbed and when it
potentially gets recycled, where if the list is empty, someone could've
upgraded it to a ring provided type. This can happen if the request
is forced via io-wq. The legacy recycling is missing checking if the
buffer_list still exists, and if it's of the correct type. Add those
checks.
Cc: stable@vger.kernel.org
Fixes: c7fb19428d67 ("io_uring: add support for ring mapped supplied buffers")
Reported-by: Keenan Dong <keenanat2000@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/perf/scripts/python/stackcollapse.py')
0 files changed, 0 insertions, 0 deletions