From mboxrd@z Thu Jan 1 00:00:00 1970 From: Vasily Averin Subject: Re: [PATCH v4] fs: umount on symlink leaks mnt count Date: Thu, 24 Jul 2014 09:59:40 +0400 Message-ID: <53D0A0CC.9070506@parallels.com> References: <53CCCF9F.6090301@parallels.com> <1406095603.2509.11.camel@perseus.fritz.box> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: Alexander Viro , linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, Richard Weinberger To: unlisted-recipients:; (no To-header on input) Return-path: In-Reply-To: <1406095603.2509.11.camel@perseus.fritz.box> Sender: linux-kernel-owner@vger.kernel.org List-Id: linux-fsdevel.vger.kernel.org CVE-2014-5045 was assigned for this issue On 07/23/2014 10:06 AM, Ian Kent wrote: > On Mon, 2014-07-21 at 12:30 +0400, Vasily Averin wrote: >> Currently umount on symlink blocks following umount: >> >> /vz is separate mount >> >> # ls /vz/ -al | grep test >> drwxr-xr-x. 2 root root 4096 Jul 19 01:14 testdir >> lrwxrwxrwx. 1 root root 11 Jul 19 01:16 testlink -> /vz/testdir >> # umount -l /vz/testlink >> umount: /vz/testlink: not mounted (expected) >> >> # lsof /vz >> # umount /vz >> umount: /vz: device is busy. (unexpected) >> >> In this case mountpoint_last() gets an extra refcount on path->mnt >> >> Signed-off-by: Vasily Averin > > Acked-by: Ian Kent