Roger Pau Monne 107866a8eb xen-netback: take a reference to the RX task thread ... Do this in order to prevent the task from being freed if the thread returns (which can be triggered by the frontend) before the call to kthread_stop done as part of the backend tear down. Not taking the reference will lead to a use-after-free in that scenario. Such reference was taken before but dropped as part of the rework done in 2ac061ce97. Reintroduce the reference taking and add a comment this time explaining why it's needed. This is XSA-374 / CVE-2021-28691. Fixes: 2ac061ce97 ('xen/netback: cleanup init and deinit code') Signed-off-by: Roger Pau Monné <roger.pau@citrix.com> Cc: stable@vger.kernel.org Reviewed-by: Jan Beulich <jbeulich@suse.com> Reviewed-by: Juergen Gross <jgross@suse.com> Signed-off-by: Juergen Gross <jgross@suse.com>		2021-06-07 15:13:15 +02:00
..
common.h	skbuff: Add skb parameter to the ubuf zerocopy callback	2021-01-07 16:06:37 -08:00
hash.c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
interface.c	xen-netback: take a reference to the RX task thread	2021-06-07 15:13:15 +02:00
Makefile
netback.c	Merge git://git.kernel.org:/pub/scm/linux/kernel/git/netdev/net	2021-03-09 17:15:56 -08:00
rx.c	xen/netback: avoid race in xenvif_rx_ring_slots_available()	2021-02-04 10:54:37 -08:00
xenbus.c	xen-netback: Check for hotplug-status existence before watching	2021-04-13 15:24:14 -07:00