]> dgit.raspbian.org Git - grub2.git/commit
disk/loopback: Reference tracking for the loopback
authorB Horn <b@horn.uk>
Sun, 12 May 2024 02:26:19 +0000 (03:26 +0100)
committerAurelien Jarno <aurel32@debian.org>
Thu, 30 Apr 2026 19:02:01 +0000 (21:02 +0200)
commitccc5b950d587ebd4033f575c0d4ce1332be89f20
tree0bd49ee9ca0f500bdcb7a9a05d962b154a9627fb
parent8db814bddc0a4b4ec2f47d792a9239aad46617b4
disk/loopback: Reference tracking for the loopback

It was possible to delete a loopback while there were still references
to it. This led to an exploitable use-after-free.

Fixed by implementing a reference counting in the grub_loopback struct.

Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name disk-loopback-Reference-tracking-for-the-loopback.patch
grub-core/disk/loopback.c
include/grub/err.h