projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 0a83501) | patch
disk/loopback: Reference tracking for the loopback
authorB Horn <b@horn.uk>
Sun, 12 May 2024 02:26:19 +0000 (03:26 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Wed, 11 Jun 2025 15:42:34 +0000 (17:42 +0200)
commitd754dfb2119c851674ea0a0396456ba18060a3b4
tree953ac68e96cb3281b126b83e226d5218dbec28e1tree | snapshot
parent0a8350156865644d2ac6a07941430c74ecf73eebcommit | diff
disk/loopback: Reference tracking for the loopback

It was possible to delete a loopback while there were still references
to it. This led to an exploitable use-after-free.

Fixed by implementing a reference counting in the grub_loopback struct.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name disk-loopback-Reference-tracking-for-the-loopback.patch
grub-core/disk/loopback.c diff | blob | history
include/grub/err.h diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.