can: bcm: add missing rcu read protection for procfs content
When the procfs content is generated for a bcm_op which is in the process to be removed the procfs output might show unreliable data (UAF). As the removal of bcm_op's is already implemented with rcu handling this patch adds the missing rcu_read_lock() and makes sure the list entries are properly removed under rcu protection. Fixes: f1b4e32a ("can: bcm: use call_rcu() instead of costly synchronize_rcu()") Reported-by:Anderson Nascimento <anderson@allelesecurity.com> Suggested-by:
Anderson Nascimento <anderson@allelesecurity.com> Tested-by:
Anderson Nascimento <anderson@allelesecurity.com> Signed-off-by:
Oliver Hartkopp <socketcan@hartkopp.net> Link: https://patch.msgid.link/20250519125027.11900-2-socketcan@hartkopp.net Cc: stable@vger.kernel.org # >= 5.4 Signed-off-by:
Marc Kleine-Budde <mkl@pengutronix.de>
Loading
Please register or sign in to comment