From: Asias He Date: Wed, 15 Jan 2014 23:48:48 +0000 (+1030) Subject: virtio-scsi: Fix hotcpu_notifier use-after-free with virtscsi_freeze X-Git-Tag: v3.14-rc1~125^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f466f75385369a181409e46da272db3de6f5c5cb;p=pandora-kernel.git virtio-scsi: Fix hotcpu_notifier use-after-free with virtscsi_freeze vqs are freed in virtscsi_freeze but the hotcpu_notifier is not unregistered. We will have a use-after-free usage when the notifier callback is called after virtscsi_freeze. Fixes: 285e71ea6f3583a85e27cb2b9a7d8c35d4c0d558 ("virtio-scsi: reset virtqueue affinity when doing cpu hotplug") Cc: stable@vger.kernel.org Signed-off-by: Asias He Reviewed-by: Paolo Bonzini Signed-off-by: Jason Wang Signed-off-by: Rusty Russell --- Reading git-diff-tree failed