Linux kernel bug fix: io_uring/poll: fix poll_refs race with cancelation
Subsystem: io_uring (io_uring/poll.c)
Bug type: use-after-free, severity: security
Keywords: race condition;use after free;null pointer
Files changed: io_uring/poll.c
Introduced by Pavel Begunkov on 2021-12-28 09:51:15 -0800; fixed by Lin Ma on 2022-11-25 07:17:33 -0700 (lifetime: 331 days)