HomeFreeBSD

ibcore: Fix use-after-free access in ucma_close()

Description

ibcore: Fix use-after-free access in ucma_close()

The error in ucma_create_id() left ctx in the list of contexts belong
to ucma file descriptor. The attempt to close this file descriptor causes
to use-after-free accesses while iterating over such list.

Linux commit:
ed65a4dc22083e73bac599ded6a262318cad7baf

PR: 264650
Sponsored by: NVIDIA Networking

(cherry picked from commit 66a0bc2105e43e54abfaa9f48b76c28371fa2d62)

Details

Provenance
hselaskyAuthored on Jun 13 2022, 2:55 PM
Parents
rG0b5f08439d27: uchcom(4): Add new USB ID.
Branches
Unknown
Tags
Unknown