From nobody Sat Jun 20 17:34:33 2026 Received: from mail-pf1-f180.google.com (mail-pf1-f180.google.com [209.85.210.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A7C251F2BAD for ; Sun, 12 Apr 2026 15:42:31 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.180 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776008552; cv=none; b=soCP0dqcxFs2OM+7/MS23orVHD32BJADsFdtvCj6XLe8AWCv+ubtfas1pPndNSu1lL4x41Paqd4tS6IBY+VR7/boIVQm5c2ZjD5a1jrxecF4pH+2YR56dhjpGUuvIVWlc5LWgNB9OCWV4HWHP07XXaSAFRPkZ5gO1j1Die+1POI= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1776008552; c=relaxed/simple; bh=6EZ4uudlTlmt1z3B9/SeVUJSAjeCc5mAleyjMUXVJWU=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=NBRO8xOiX7yOjOkipxA3XbOU4KAPL+E3QuDdrDxxdu34WdQnMQtyAMy6w1r0AYuE+UmaCcWUTtm+XiHC1nMMDIGKdiGiudIuuVJXSSWzTyjeU4eKvMGe+9xfQ4FxMIrdVsuMp5IOwEhEL+9GHH9J9OJTeJxVY4auXqLdu0zoeIE= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=BB/oLqz4; arc=none smtp.client-ip=209.85.210.180 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="BB/oLqz4" Received: by mail-pf1-f180.google.com with SMTP id d2e1a72fcca58-82748257f5fso1918490b3a.1 for ; Sun, 12 Apr 2026 08:42:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1776008551; x=1776613351; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=asIGxvququexs7PTZV6rQ9JxYEOvHAcXSlP0iwqlnoo=; b=BB/oLqz4M5PFWj5rIgUf+6acYCwCV2QRUt73FDizWZOFEZYQo6VI/UPRIty80Prl0K 9GREfmFdbXI3INM93367IDttTY5j0y5vmUFEAAhI4HuR4WYV8Zte6ySpH6cruYgYFxmD QOeDTgzKCCoV6qjbGjuVTw6FnmvxCJug8nkx1QoGM952uo//MvUQO2UEcy7C0xnBh4je eBU89kbHb5tW0qG+UubMutV2aEG2kbe+XEDqmMvjGdckg/3q5IUdI6iZ+y/rugt8FqY+ zMpkrmZ5zBs4GKcw/oVYc87gYttnzRMz6TIT92d26prDYsifbM5yksm5aflJLN7m7y7h Espg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1776008551; x=1776613351; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=asIGxvququexs7PTZV6rQ9JxYEOvHAcXSlP0iwqlnoo=; b=k3xQlKBg8Uq2QzkBLVFmFcbJS0Kbanh4g7MgE6MKz5eqb9c+5z4sGAIh9M+8nfKxJB oA+J/S0m7qQTmUZ627hEdpRxEwDVHMl8p8U44WsccponyWcvv6m4rxHxIxLOI8wWFrJi p6xKzdk/9kNSc5hN9/f9JYXaPE87Oum7lxwbopY5p7mlud32GG7mxhFGLHN17fr0IW01 ZssHwhXXGYgXPNSTN4V50DPX8O6Ji1zTYDAyQV8nobAKbxCQUQKt5SGgVdn58HYWY0eB EWMK731GH1gcZER7Usqml4v4FeDmSs6GTV+oE3wQEn1ZzdEfaLcjbiOr9W5xxZEvkGfi zIRw== X-Forwarded-Encrypted: i=1; AJvYcCXga4hCXn7fMExgLZz1dZrbdECiljyZuVjz2JIGXwI2tXqa0woMV+givw4Mr5sXI8VdFdnl3kPSYzOq9Z8=@vger.kernel.org X-Gm-Message-State: AOJu0YwAkgLxHkmMNQqU9LOyDDp1r11tCpGd91gQrJGC71aPukZKBcsP IV4w8qEcHoEYlVM/5kyFzL9NYzYoB2S/nUVuSlrkuZG3QXz88Pc8ackH X-Gm-Gg: AeBDiev0Eb5qJvnssHAhUxRlhyI4KbAPrBodz6hsgWI8OhFHg6jtGblj+TACKnSX8+Z 3OwfujLbCO1Ha3rpGFmxcMjJm/q8ZnOC3NHz3eOCIZMvfqTeliN2pOxr02Z3mwZ/lacZM9zb3cK ziEQXCRmBEAN5DssOPAEsaBsBCc3BGOOyAeovtMo8aIkkKcsjgevWWiStBf4SFjk7HA2AeCBBgw 8jDKPCE5ynIfnP/CBOjTMU8bxv7pKJlERgAwlv2oTR2vkXSDDBZXB6/XIh9N4kwsOQvAUPSe0tV MgM4tDqtVmR5O8RpgKOKlId3wtMyIGPKqsjOPvkX3BtmeO1t2CqLofhMy7Ws8QHHjP+ur1eBuA+ xRc1akWEJnyO0ze5MR0dunXzjyR1U/7f59xDGwVl/P5DdDaFGWk/icDNZbMJ3hv+b5QSjNR1HZL zlCh193v8+B7v4swfpTT+fIK4= X-Received: by 2002:a05:6a20:728b:b0:395:acfc:b679 with SMTP id adf61e73a8af0-39fc9509e72mr14563770637.18.1776008551078; Sun, 12 Apr 2026 08:42:31 -0700 (PDT) Received: from lgs.. ([2409:893d:1188:142d:f515:539:1a62:ab91]) by smtp.gmail.com with ESMTPSA id 41be03b00d2f7-c7921534918sm8255671a12.0.2026.04.12.08.42.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 12 Apr 2026 08:42:30 -0700 (PDT) From: Guangshuo Li To: Song Liu , Yu Kuai , Greg Kroah-Hartman , linux-raid@vger.kernel.org, linux-kernel@vger.kernel.org Cc: Guangshuo Li , stable@vger.kernel.org Subject: [PATCH] md: fix kobject reference leak in md_import_device() Date: Sun, 12 Apr 2026 23:42:19 +0800 Message-ID: <20260412154219.2560732-1-lgs201920130244@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" md_import_device() initializes rdev->kobj with kobject_init() before checking the device size and loading the superblock. When one of the later checks fails, the error path still frees rdev directly with kfree(). This bypasses the kobject release path and leaves the kobject reference unbalanced. After kobject_init(), release rdev through kobject_put() instead of kfree(). Fixes: f9cb074bff8e ("Kobject: rename kobject_init_ng() to kobject_init()") Cc: stable@vger.kernel.org Signed-off-by: Guangshuo Li --- drivers/md/md.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/drivers/md/md.c b/drivers/md/md.c index 6d73f6e196a9..4ce7512dc834 100644 --- a/drivers/md/md.c +++ b/drivers/md/md.c @@ -3871,6 +3871,9 @@ static struct md_rdev *md_import_device(dev_t newdev,= int super_format, int supe =20 out_blkdev_put: fput(rdev->bdev_file); + md_rdev_clear(rdev); + kobject_put(&rdev->kobj); + return ERR_PTR(err); out_clear_rdev: md_rdev_clear(rdev); out_free_rdev: --=20 2.43.0