]> Gentwo Git Trees - linux/.git/commit
io_uring/waitid: always prune wait queue entry in io_waitid_wait()
authorJens Axboe <axboe@kernel.dk>
Tue, 7 Oct 2025 13:46:00 +0000 (07:46 -0600)
committerJens Axboe <axboe@kernel.dk>
Tue, 7 Oct 2025 13:46:00 +0000 (07:46 -0600)
commit2f8229d53d984c6a05b71ac9e9583d4354e3b91f
treefb57e04d36b4bc81ccdea2fce22e193a19dffc9e
parent0ca286477b5e2dc9a00ccd3ab1eaceb9fda4be06
io_uring/waitid: always prune wait queue entry in io_waitid_wait()

For a successful return, always remove our entry from the wait queue
entry list. Previously this was skipped if a cancelation was in
progress, but this can race with another invocation of the wait queue
entry callback.

Cc: stable@vger.kernel.org
Fixes: f31ecf671ddc ("io_uring: add IORING_OP_WAITID support")
Reported-by: syzbot+b9e83021d9c642a33d8c@syzkaller.appspotmail.com
Tested-by: syzbot+b9e83021d9c642a33d8c@syzkaller.appspotmail.com
Link: https://lore.kernel.org/io-uring/68e5195e.050a0220.256323.001f.GAE@google.com/
Signed-off-by: Jens Axboe <axboe@kernel.dk>
io_uring/waitid.c