Dan Carpenter a0f1d21c1c KVM: use after free in kvm_ioctl_create_device() ... We should move the ops->destroy(dev) after the list_del(&dev->vm_node) so that we don't use "dev" after freeing it. Fixes: a28ebea2ad ("KVM: Protect device ops->create and list_add with kvm->lock") Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Reviewed-by: David Hildenbrand <david@redhat.com> Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>		2016-12-01 16:10:50 +01:00
..
arm
async_pf.c
async_pf.h
coalesced_mmio.c
coalesced_mmio.h
eventfd.c
irqchip.c
Kconfig
kvm_main.c
vfio.c
vfio.h