]> www.infradead.org Git - users/jedix/linux-maple.git/commit
io_uring/rsrc: require cloned buffers to share accounting contexts
authorJann Horn <jannh@google.com>
Tue, 14 Jan 2025 17:49:00 +0000 (18:49 +0100)
committerJens Axboe <axboe@kernel.dk>
Tue, 14 Jan 2025 17:59:48 +0000 (10:59 -0700)
commit19d340a2988d4f3e673cded9dde405d727d7e248
treea972160c33c1120f172f2ef330f0b8bee376eff7
parenta13030fd194c88961be4679f87a1380f1bda0ebe
io_uring/rsrc: require cloned buffers to share accounting contexts

When IORING_REGISTER_CLONE_BUFFERS is used to clone buffers from uring
instance A to uring instance B, where A and B use different MMs for
accounting, the accounting can go wrong:
If uring instance A is closed before uring instance B, the pinned memory
counters for uring instance B will be decremented, even though the pinned
memory was originally accounted through uring instance A; so the MM of
uring instance B can end up with negative locked memory.

Cc: stable@vger.kernel.org
Closes: https://lore.kernel.org/r/CAG48ez1zez4bdhmeGLEFxtbFADY4Czn3CV0u9d_TMcbvRA01bg@mail.gmail.com
Fixes: 7cc2a6eadcd7 ("io_uring: add IORING_REGISTER_COPY_BUFFERS method")
Signed-off-by: Jann Horn <jannh@google.com>
Link: https://lore.kernel.org/r/20250114-uring-check-accounting-v1-1-42e4145aa743@google.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/rsrc.c