Skip to content

Commit 71d2721

Browse files
committed
Merge: CVE-2024-43871: devres: Fix memory leakage caused by driver API devm_free_percpu()
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/6341 JIRA: https://issues.redhat.com/browse/RHEL-78016 CVE: CVE-2024-43871 ``` devres: Fix memory leakage caused by driver API devm_free_percpu() It will cause memory leakage when use driver API devm_free_percpu() to free memory allocated by devm_alloc_percpu(), fixed by using devres_release() instead of devres_destroy() within devm_free_percpu(). Fixes: ff86aae ("devres: add devm_alloc_percpu()") Cc: stable@vger.kernel.org Signed-off-by: Zijun Hu <quic_zijuhu@quicinc.com> Link: https://lore.kernel.org/r/1719931914-19035-3-git-send-email-quic_zijuhu@quicinc.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> (cherry picked from commit bd50a97) ``` Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com> --- <small>Created 2025-02-05 13:53 UTC by backporter - [KWF FAQ](https://red.ht/kernel_workflow_doc) - [Slack #team-kernel-workflow](https://redhat-internal.slack.com/archives/C04LRUPMJQ5) - [Source](https://gitlab.com/cki-project/kernel-workflow/-/blob/main/webhook/utils/backporter.py) - [Documentation](https://gitlab.com/cki-project/kernel-workflow/-/blob/main/docs/README.backporter.md) - [Report an issue](https://gitlab.com/cki-project/kernel-workflow/-/issues/new?issue%5Btitle%5D=backporter%20webhook%20issue)</small> Approved-by: David Arcari <darcari@redhat.com> Approved-by: Steve Best <sbest@redhat.com> Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> Merged-by: Patrick Talbert <ptalbert@redhat.com>
2 parents 164e53c + ee34f67 commit 71d2721

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

drivers/base/devres.c

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1222,7 +1222,11 @@ EXPORT_SYMBOL_GPL(__devm_alloc_percpu);
12221222
*/
12231223
void devm_free_percpu(struct device *dev, void __percpu *pdata)
12241224
{
1225-
WARN_ON(devres_destroy(dev, devm_percpu_release, devm_percpu_match,
1225+
/*
1226+
* Use devres_release() to prevent memory leakage as
1227+
* devm_free_pages() does.
1228+
*/
1229+
WARN_ON(devres_release(dev, devm_percpu_release, devm_percpu_match,
12261230
(__force void *)pdata));
12271231
}
12281232
EXPORT_SYMBOL_GPL(devm_free_percpu);

0 commit comments

Comments
 (0)