Linux kernel bug fix: iommufd: Fix race during abort for file descriptors
Subsystem: iommu (drivers/iommu/iommufd/eventq.c)
Bug type: use-after-free, severity: high
Keywords: refcount;use after free;UAF
Files changed: drivers/iommu/iommufd/eventq.c;drivers/iommu/iommufd/main.c
Introduced by Lu Baolu on 2024-07-09 13:54:32 -0300; fixed by Jason Gunthorpe on 2025-09-19 10:34:49 -0300 (lifetime: 436 days)