fcb32111f0
commit e7250ab7ca4998fe026f2149805b03e09dc32498 upstream.
In iopt_area_split(), if the original iopt_area has filled a domain and is
linked to domains_itree, pages_nodes have to be properly
reinserted. Otherwise the domains_itree becomes corrupted and we will UAF.
Fixes:
|
||
---|---|---|
.. | ||
Kconfig | ||
Makefile | ||
device.c | ||
double_span.h | ||
hw_pagetable.c | ||
io_pagetable.c | ||
io_pagetable.h | ||
ioas.c | ||
iommufd_private.h | ||
iommufd_test.h | ||
main.c | ||
pages.c | ||
selftest.c | ||
vfio_compat.c |