From: Linus Torvalds <torvalds@linux-foundation.org>
Date: Fri, 13 Jun 2025 17:51:11 +0000 (-0700)
Subject: Merge tag 'trace-v6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace... 
X-Git-Url: https://git.kernel.dk/?a=commitdiff_plain;h=3ca933aad0aca463512d2f54a79fc65b8ecb0f48;p=linux-block.git

Merge tag 'trace-v6.16-rc1' of git://git./linux/kernel/git/trace/linux-trace

Pull tracing fix from Steven Rostedt:

 - Do not free "head" variable in filter_free_subsystem_filters()

   The first error path jumps to "free_now" label but first frees the
   newly allocated "head" variable. But the "free_now" code checks this
   variable, and if it is not NULL, it will iterate the list. As this
   list variable was already initialized, the "free_now" code will not
   do anything as it is empty. But freeing it will cause a UAF bug.

   The error path should simply jump to the "free_now" label and leave
   the "head" variable alone.

* tag 'trace-v6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:
  tracing: Do not free "head" on error path of filter_free_subsystem_filters()
---

3ca933aad0aca463512d2f54a79fc65b8ecb0f48