mirror of
https://github.com/torvalds/linux
synced 2024-10-10 21:36:41 +00:00
43b92fd27a
A NULL deref happens when nvmet_rdma_remove_one() is called more than once
(e.g. while connected via 2 ports).
The first call frees the queues related to the first ib_device but
doesn't remove them from the queue list.
While calling nvmet_rdma_remove_one() for the second ib_device it goes over
the full queue list again and we get the NULL deref.
Fixes:
|
||
---|---|---|
.. | ||
admin-cmd.c | ||
configfs.c | ||
core.c | ||
discovery.c | ||
fabrics-cmd.c | ||
fc.c | ||
fcloop.c | ||
io-cmd.c | ||
Kconfig | ||
loop.c | ||
Makefile | ||
nvmet.h | ||
rdma.c |