Vitaliy ShevtsovandGreg Kroah-Hartman c94e965f76 nvmet-auth: assign dh_key to NULL after kfree_sensitive ...

[ Upstream commit d2f551b1f7 ]

ctrl->dh_key might be used across multiple calls to nvmet_setup_dhgroup()
for the same controller. So it's better to nullify it after release on
error path in order to avoid double free later in nvmet_destroy_auth().

Found by Linux Verification Center (linuxtesting.org) with Svace.

Fixes: 7a277c37d3 ("nvmet-auth: Diffie-Hellman key exchange support")
Cc: stable@vger.kernel.org
Signed-off-by: Vitaliy Shevtsov <v.shevtsov@maxima.ru>
Reviewed-by: Christoph Hellwig <hch@lst.de>
Reviewed-by: Hannes Reinecke <hare@suse.de>
Signed-off-by: Keith Busch <kbusch@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-11-08 16:26:46 +01:00

..

common

…

host

nvme-pci: qdepth 1 quirk

2024-10-17 15:21:37 +02:00

target

nvmet-auth: assign dh_key to NULL after kfree_sensitive

2024-11-08 16:26:46 +01:00

Kconfig

…

Makefile

…