diff options
| author | Pavel Begunkov <asml.silence@gmail.com> | 2026-02-14 22:19:32 +0000 |
|---|---|---|
| committer | Jens Axboe <axboe@kernel.dk> | 2026-02-14 18:05:00 -0700 |
| commit | a983aae397767e9da931128ff2b5bf9066513ce3 (patch) | |
| tree | d633067c0bc576b9c877e9c3877fac672d26b231 /rust/alloc/collections/git@git.tavy.me:linux.git | |
| parent | d7d95207caf41a8b5a595ed257cb4ce69726d3d7 (diff) | |
io_uring/zcrx: fix sgtable leak on mapping failures
In an unlikely case when io_populate_area_dma() fails, which could only
happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine,
io_zcrx_map_area() will have an initialised and not freed table. It was
supposed to be cleaned up in the error path, but !is_mapped prevents
that.
Fixes: 439a98b972fbb ("io_uring/zcrx: deduplicate area mapping")
Cc: stable@vger.kernel.org
Reported-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Pavel Begunkov <asml.silence@gmail.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Diffstat (limited to 'rust/alloc/collections/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions