Dan Carpenter a0f1d21c1c KVM: use after free in kvm_ioctl_create_device() ... We should move the ops->destroy(dev) after the list_del(&dev->vm_node) so that we don't use "dev" after freeing it. Fixes: a28ebea2ad ("KVM: Protect device ops->create and list_add with kvm->lock") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: David Hildenbrand <david@redhat.com> Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>		2016-12-01 16:10:50 +01:00
..
arm	KVM: arm/arm64: vgic: Don't notify EOI for non-SPIs	2016-11-24 13:12:07 +00:00
Kconfig	KVM: remove kvm_vcpu_compatible	2016-06-16 00:05:00 +02:00
async_pf.c	KVM: async_pf: avoid recursive flushing of work items	2016-11-19 19:04:17 +01:00
async_pf.h	KVM: fix checkpatch.pl errors in kvm/async_pf.h	2015-06-19 17:16:25 +02:00
coalesced_mmio.c	KVM: move iodev.h from virt/kvm/ to include/kvm	2015-03-26 21:43:12 +00:00
coalesced_mmio.h	KVM: make the declaration of functions within 80 characters	2015-09-14 18:43:19 +02:00
eventfd.c	KVM: fix OOPS on flush_work	2016-10-26 14:06:51 +02:00
irqchip.c	KVM/ARM Changes for v4.8 - Take 2	2016-08-04 13:59:56 +02:00
kvm_main.c	KVM: use after free in kvm_ioctl_create_device()	2016-12-01 16:10:50 +01:00
vfio.c	KVM: count number of assigned devices	2015-07-10 13:25:26 +02:00
vfio.h	kvm: vfio: fix unregister kvm_device_ops of vfio	2014-10-24 13:30:47 +02:00