Li Chen da716ce378 loop: fix backing file reference leak on validation error ...

commit 98b7bf54338b797e3a11e8178ce0e806060d8fa3 upstream.

loop_change_fd() and loop_configure() call loop_check_backing_file()
to validate the new backing file. If validation fails, the reference
acquired by fget() was not dropped, leaking a file reference.

Fix this by calling fput(file) before returning the error.

Cc: stable@vger.kernel.org
Cc: Markus Elfring <Markus.Elfring@web.de>
CC: Yang Erkun <yangerkun@huawei.com>
Cc: Ming Lei <ming.lei@redhat.com>
Cc: Yu Kuai <yukuai1@huaweicloud.com>
Fixes: f5c84eff63 ("loop: Add sanity check for read/write_iter")
Signed-off-by: Li Chen <chenl311@chinatelecom.cn>
Reviewed-by: Ming Lei <ming.lei@redhat.com>
Reviewed-by: Yang Erkun <yangerkun@huawei.com>
Signed-off-by: Jens Axboe <axboe@kernel.dk>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2025-10-19 16:37:28 +02:00

..

aoe

Merge tag 'block-6.16-20250619' of git://git.kernel.dk/linux

2025-06-19 23:29:35 -07:00

drbd

drbd: init queue_limits->max_hw_wzeroes_unmap_sectors parameter

2025-09-17 08:20:49 -06:00

mtip32xx

block: mtip32xx: Fix usage of dma_map_sg()

2025-07-08 11:55:38 -06:00

null_blk

null_blk: Fix the description of the cache_size module argument

2025-10-15 12:03:26 +02:00

rnbd

rnbd-srv: use bio_add_virt_nofail

2025-05-07 07:31:07 -06:00

xen-blkback

xen/blkback: convert timeouts to secs_to_jiffies()

2025-01-12 20:21:03 -08:00

zram

zram: fix slot write race condition

2025-09-15 20:01:45 -07:00

amiflop.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

ataflop.c

treewide: Switch/rename to timer_delete[_sync]()

2025-04-05 10:30:12 +02:00

brd.c

brd: fix sleeping function called from invalid context in brd_insert_page()

2025-07-01 08:14:01 -06:00

floppy.c

block: floppy: Fix uninitialized use of outparam

2025-07-13 12:08:31 -06:00

Kconfig

block: remove pktcdvd driver

2025-07-07 07:02:42 -06:00

loop.c

loop: fix backing file reference leak on validation error

2025-10-19 16:37:28 +02:00

Makefile

block: remove pktcdvd driver

2025-07-07 07:02:42 -06:00

n64cart.c

block: move the nonrot flag to queue_limits

2024-06-19 07:58:28 -06:00

nbd.c

nbd: restrict sockets to TCP and UDP

2025-10-15 12:03:27 +02:00

ps3disk.c

ps3disk: Do not use dev->bounce_size before it is set

2025-01-03 11:44:25 -07:00

ps3vram.c

block: pass a queue_limits argument to blk_alloc_disk

2024-02-19 16:58:23 -07:00

rbd_types.h

…

rbd.c

block: force noio scope in blk_mq_freeze_queue

2025-01-31 07:20:08 -07:00

rnull.rs

rust: module: introduce authors key

2025-03-10 15:12:17 +01:00

sunvdc.c

sunvdc: Balance device refcount in vdc_port_mpgroup_check

2025-07-22 10:02:17 -06:00

swim3.c

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

swim_asm.S

…

swim.c

block: remove BLK_MQ_F_SHOULD_MERGE

2024-12-23 08:17:23 -07:00

ublk_drv.c

ublk: avoid ublk_io_release() called after ublk char dev is closed

2025-08-28 07:56:57 -06:00

virtio_blk.c

virtio: blk/scsi: use block layer helpers to calculate num of queues

2025-07-01 10:24:19 -06:00

xen-blkfront.c

block: remove unused parameter 'q' parameter in __blk_rq_map_sg()

2025-03-13 05:46:19 -06:00

z2ram.c

block: remove BLK_MQ_F_SHOULD_MERGE

2024-12-23 08:17:23 -07:00

zloop.c

zloop: fix KASAN use-after-free of tag set

2025-07-31 15:01:07 -06:00