Linux kernel bug fix: epoll: fix race between ep_poll_callback(POLLFREE) and ep_free()/ep_remove()
Subsystem: filesystem (fs/eventpoll.c)
Bug type: use-after-free, severity: high
Keywords: use after free
Files changed: fs/eventpoll.c
Introduced by Oleg Nesterov on 2012-02-24 11:42:50 -0800; fixed by Oleg Nesterov on 2017-09-01 13:07:35 -0700 (lifetime: 2016 days)