projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e67cef1) | patch
disk/loopback: Reference tracking for the loopback
authorB Horn <b@horn.uk>
Sun, 12 May 2024 02:26:19 +0000 (03:26 +0100)
committerMiao Wang <shankerwangmiao@gmail.com>
Sun, 15 Feb 2026 13:50:20 +0000 (13:50 +0000)
commitf42f7235cad2f01f4a469b99c30c2a9e2c4bd839
tree4deba6f65cb58ff21c86d054a357aec13915d5cctree | snapshot
parente67cef1999cbcbe2908742e1622c397f60fe8102commit | diff
disk/loopback: Reference tracking for the loopback

It was possible to delete a loopback while there were still references
to it. This led to an exploitable use-after-free.

Fixed by implementing a reference counting in the grub_loopback struct.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name disk-loopback-Reference-tracking-for-the-loopback.patch
grub-core/disk/loopback.c diff | blob | history
include/grub/err.h diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.