[PATCH 2 0/2] xfs: fix inline link path race

From: Ian Kent
Date: Sun Nov 14 2021 - 21:24:59 EST


If the inode of an inline symlink is released (dropped) while a path walk
that is in rcu-walk mode is occuring the inode ->get_link() method can be
NULL when VFS dereferences it causing a crash. But, since the release can
occur at any time there's a small but finite possibility the link path
text could be freed while it's being used.

Changes since v1:
- don't bother trying to rcu-free the link path since there could
be side effects from the xfs reclaim code.
---

Ian Kent (2):
vfs: check dentry is still valid in get_link()
xfs: make sure link path does not go away at access


fs/xfs/xfs_iops.c | 3 +++
1 file changed, 3 insertions(+)

--
Ian