From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 199C8C433FE for ; Wed, 27 Oct 2021 08:38:06 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id E9A3C610A3 for ; Wed, 27 Oct 2021 08:38:05 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239322AbhJ0Ik3 (ORCPT ); Wed, 27 Oct 2021 04:40:29 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:47708 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232025AbhJ0Ik2 (ORCPT ); Wed, 27 Oct 2021 04:40:28 -0400 Received: from mail-wr1-x430.google.com (mail-wr1-x430.google.com [IPv6:2a00:1450:4864:20::430]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 39C04C061570 for ; Wed, 27 Oct 2021 01:38:03 -0700 (PDT) Received: by mail-wr1-x430.google.com with SMTP id e12so2748118wra.4 for ; Wed, 27 Oct 2021 01:38:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:content-transfer-encoding:in-reply-to; bh=4UAfLG95f2ntu5NMsJJZGVxq5Ea4XqyDufFWTyZc3Rk=; b=fddbrWlWx0Fby+9qGR8uvz1YCtY10pv6dVWFA+emfTEA/2FBinO83s6uVfLQ4Uupbc OMOVx+9HMJEG+2pygjbOcC70Ejrne63PVfdufXULjrfYkPLyom0iq55a0rUjO0wvL/vF Ar43Ll5MlJthmBwmkGemoVGfx6W9I6MUJcvGF0BUob9ykM26DvCjBBkxeL72SSPRku0q O8e4xUmoz0GKKelo2pcE+abDMcWtEfDM5QzMOcCPnG6haeu+kO2xZsQGEq4VLbfKjzo2 XOa4v+a20J/SeTbQmXaAkEQpwWoepCWeKzJa8IYDB25yNNHKEAUoisyVbBbIgBmEMrri egIQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:content-transfer-encoding :in-reply-to; bh=4UAfLG95f2ntu5NMsJJZGVxq5Ea4XqyDufFWTyZc3Rk=; b=d6TRPycXFE6xL9fZfvbRVknNd7ZbEF0UEyqj2U7y9NnnBO/8MmNkUuTLcbOMV/7ubz kk1vHMOHFEXJsXouZVeLN01r58STluqhAvjNmSjdF1yvdYE4G3HuYNJuALpBl6zn1L1y 4yxSL+AQOkGlWEU3eHT96kZ2HZJKu+gCrMrn19vwZ1UDrfRBGWnNK5MZhpwQKVzbcSKB gUuh/MXyFz/IHBLW+XvdqMbQhE94ovtM+dZtjDlJfVA+9T6KUYecZW+p2aHrrfevhivt 9Cwiu1lIW0Rkys29yRjhGNMBNdeVDUSgKTFAZsVvB8aULEhlqT4EQNkZNbcDv+IzA/Om DgtA== X-Gm-Message-State: AOAM533hjDgBz7IxUy423IrMbP9LbjvHnRcgbZfxKBmEZUTP8xfzB8l9 Q04al5kjslsLPmFEbCWPiR1uBg== X-Google-Smtp-Source: ABdhPJwMMHyW5kZdqvlRF0nvAIHV0pjT/6da6OLVMP+QP/ewCeK4dz8U/xM2+1EUTrjrkvrkGJbpyg== X-Received: by 2002:a05:6000:2c2:: with SMTP id o2mr39285055wry.194.1635323881808; Wed, 27 Oct 2021 01:38:01 -0700 (PDT) Received: from google.com ([95.148.6.207]) by smtp.gmail.com with ESMTPSA id d24sm2655421wmb.35.2021.10.27.01.38.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 27 Oct 2021 01:38:01 -0700 (PDT) Date: Wed, 27 Oct 2021 09:37:59 +0100 From: Lee Jones To: Greg KH Cc: stable@vger.kernel.org, axboe@kernel.dk, asml.silence@gmail.com, io-uring@vger.kernel.org, syzbot+59d8a1f4e60c20c066cf@syzkaller.appspotmail.com Subject: Re: [PATCH 5.10 1/1] io_uring: fix double free in the deferred/cancelled path Message-ID: References: <20211027080128.1836624-1-lee.jones@linaro.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: io-uring@vger.kernel.org On Wed, 27 Oct 2021, Greg KH wrote: > On Wed, Oct 27, 2021 at 09:01:28AM +0100, Lee Jones wrote: > > 792bb6eb86233 ("io_uring: don't take uring_lock during iowq cancel") > > inadvertently fixed this issue in v5.12. This patch cherry-picks the > > hunk of commit which does so. > > Why can't we take all of that commit? Why only part of it? I don't know. Why didn't the Stable team take it further than v5.11.y? -- Lee Jones [李琼斯] Senior Technical Lead - Developer Services Linaro.org │ Open source software for Arm SoCs Follow Linaro: Facebook | Twitter | Blog