You have been subscribed to a public bug:

== Comment: #0 - Hendrik Brueckner <[email protected]> - 2016-05-23 09:09:00 
==
Please backport upstream Linux commit ID:

commit dba599091c191d209b1499511a524ad9657c0e5a
Author: Sebastian Ott <[email protected]>
Date:   Fri Apr 15 09:41:35 2016 +0200

    s390/pci: fix use after free in dma_init
    
    After a failure during registration of the dma_table (because of the
    function being in error state) we free its memory but don't reset the
    associated pointer to zero.
    
    When we then receive a notification from firmware (about the function
    being in error state) we'll try to walk and free the dma_table again.
    
    Fix this by resetting the dma_table pointer. In addition to that make
    sure that we free the iommu_bitmap when appropriate.
    
    Signed-off-by: Sebastian Ott <[email protected]>
    Reviewed-by: Gerald Schaefer <[email protected]>
    Signed-off-by: Martin Schwidefsky <[email protected]>

** Affects: linux (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: New


** Tags: architecture-s39064 bugnameltc-141691 severity-high 
targetmilestone-inin1604
-- 
s390/pci: fix use after free in dma_init
https://bugs.launchpad.net/bugs/1584828
You received this bug notification because you are a member of Kernel Packages, 
which is subscribed to linux in Ubuntu.

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to