)]}'
{
  "commit": "1a623d361ffe5cecd4244a02f449528416360038",
  "tree": "b99709904f01723c8475b87507637b4427b9c94c",
  "parents": [
    "33fcb359a64213bea0510770abc761de9780ca89"
  ],
  "author": {
    "name": "Pavel Begunkov",
    "email": "asml.silence@gmail.com",
    "time": "Thu Apr 14 08:50:50 2022 +0100"
  },
  "committer": {
    "name": "Greg Kroah-Hartman",
    "email": "gregkh@linuxfoundation.org",
    "time": "Fri Apr 15 14:18:41 2022 +0200"
  },
  "message": "io_uring: fix fs-\u003eusers overflow\n\nThere is a bunch of cases where we can grab req-\u003efs but not put it, this\ncan be used to cause a controllable overflow with further implications.\nRelease req-\u003efs in the request free path and make sure we zero the field\nto be sure we don\u0027t do it twice.\n\nFixes: cac68d12c531 (\"io_uring: grab -\u003efs as part of async offload\")\nReported-by: Bing-Jhong Billy Jheng \u003cbilly@starlabs.sg\u003e\nSigned-off-by: Pavel Begunkov \u003casml.silence@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "478df7e10767a660d0a51b49fafd0c7d868d22c7",
      "old_mode": 33188,
      "old_path": "fs/io_uring.c",
      "new_id": "e73969fa96bcb088f3ea005e7191c086cc7347a6",
      "new_mode": 33188,
      "new_path": "fs/io_uring.c"
    }
  ]
}
