Jens Axboe 8efff2aa2d io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period ... Commit c9a40292a44e78f71258b8522655bffaf5753bdb upstream. io_eventfd_do_signal() is invoked from an RCU callback, but when dropping the reference to the io_ev_fd, it calls io_eventfd_free() directly if the refcount drops to zero. This isn't correct, as any potential freeing of the io_ev_fd should be deferred another RCU grace period. Just call io_eventfd_put() rather than open-code the dec-and-test and free, which will correctly defer it another RCU grace period. Fixes: 21a091b970 ("io_uring: signal registered eventfd to process deferred task work") Reported-by: Jann Horn <jannh@google.com> Cc: stable@vger.kernel.org Signed-off-by: Jens Axboe <axboe@kernel.dk> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2025-01-17 13:36:24 +01:00
..
Makefile	…
advise.c	io_uring: always go async for unsupported fadvise flags	2023-01-29 15:18:26 -07:00
advise.h	…
alloc_cache.h	io_uring/rsrc: consolidate node caching	2023-04-12 12:09:41 -06:00
cancel.c	io_uring: use fget/fput consistently	2024-01-20 11:51:38 +01:00
cancel.h	io_uring/cancel: support opcode based lookup and cancelation	2023-07-17 10:05:48 -06:00
epoll.c	io_uring: undeprecate epoll_ctl support	2023-05-26 20:22:41 -06:00
epoll.h	…
fdinfo.c	io_uring/fdinfo: remove need for sqpoll lock for thread/pid retrieval	2023-11-28 17:19:52 +00:00
fdinfo.h	…
filetable.c	io_uring: drop any code related to SCM_RIGHTS	2024-03-26 18:19:09 -04:00
filetable.h	io_uring: add helpers to decode the fixed file file_ptr	2023-06-20 09:36:22 -06:00
fs.c	io_uring/fs: consider link->flags when getting path for LINKAT	2023-12-03 07:33:07 +01:00
fs.h	…
io-wq.c	io_uring/io-wq: inherit cpuset of cgroup in io worker	2024-10-04 16:29:01 +02:00
io-wq.h	io_uring: break out of iowq iopoll on teardown	2023-09-07 09:02:27 -06:00
io_uring.c	io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period	2025-01-17 13:36:24 +01:00
io_uring.h	io_uring/rw: avoid punting to io-wq directly	2024-12-27 13:58:57 +01:00
kbuf.c	io_uring: check for non-NULL file pointer in io_file_can_poll()	2024-06-21 14:38:23 +02:00
kbuf.h	io_uring/kbuf: hold io_buffer_list reference over mmap	2024-04-10 16:36:03 +02:00
msg_ring.c	io_uring: use io_file_from_index in io_msg_grab_file	2023-06-20 09:36:22 -06:00
msg_ring.h	io_uring: get rid of double locking	2022-12-07 06:47:13 -07:00
net.c	io_uring/net: harden multishot termination case for recv	2024-10-10 11:58:02 +02:00
net.h	io_uring: Add KASAN support for alloc_caches	2023-04-03 07:16:14 -06:00
nop.c	io_uring: fail NOP if non-zero op flags is passed in	2024-06-12 11:11:18 +02:00
nop.h	…
notif.c	io_uring/notif: add constant for ubuf_info flags	2023-04-15 14:21:04 -06:00
notif.h	io_uring/notif: add constant for ubuf_info flags	2023-04-15 14:21:04 -06:00
opdef.c	io_uring: Pass whole sqe to commands	2023-05-04 08:19:05 -06:00
opdef.h	io_uring: Split io_issue_def struct	2023-01-29 15:17:41 -07:00
openclose.c	io_uring: correct check for O_TMPFILE	2023-08-07 12:34:23 -06:00
openclose.h	…
poll.c	io_uring: fix poll_remove stalled req completion	2024-03-26 18:20:09 -04:00
poll.h	io_uring: avoid indirect function calls for the hottest task_work	2023-06-02 08:55:37 -06:00
refs.h	…
rsrc.c	io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed	2024-06-27 13:49:10 +02:00
rsrc.h	io_uring: drop any code related to SCM_RIGHTS	2024-03-26 18:19:09 -04:00
rw.c	io_uring/rw: avoid punting to io-wq directly	2024-12-27 13:58:57 +01:00
rw.h	io_uring: avoid indirect function calls for the hottest task_work	2023-06-02 08:55:37 -06:00
slist.h	io_uring: silence variable ‘prev’ set but not used warning	2023-03-09 10:10:58 -07:00
splice.c	io_uring/splice: use fput() directly	2023-08-10 10:24:25 -06:00
splice.h	…
sqpoll.c	io_uring/sqpoll: fix sqpoll error handling races	2025-01-02 10:32:10 +01:00
sqpoll.h	io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used	2023-08-16 13:40:28 -06:00
statx.c	io_uring: for requests that require async, force it	2023-01-29 15:18:26 -07:00
statx.h	…
sync.c	io_uring: for requests that require async, force it	2023-01-29 15:18:26 -07:00
sync.h	…
tctx.c	io_uring/tctx: work around xa_store() allocation error issue	2024-12-14 20:00:17 +01:00
tctx.h	io_uring: simplify __io_uring_add_tctx_node	2022-10-07 12:25:30 -06:00
timeout.c	io_uring/timeout: fix multishot updates	2025-01-17 13:36:19 +01:00
timeout.h	io_uring: remove unused return from io_disarm_next	2022-09-21 13:15:01 -06:00
uring_cmd.c	io_uring/cmd: fix breakage in SOCKET_URING_OP_SIOC* implementation	2023-12-20 17:01:52 +01:00
uring_cmd.h	io_uring: Remove unnecessary BUILD_BUG_ON	2023-05-04 08:19:05 -06:00
xattr.c	io_uring: for requests that require async, force it	2023-01-29 15:18:26 -07:00
xattr.h	…