Re: [PATCH] mrp: introduce active flags to prevent UAF when applicant uninit
From: patchwork-bot+netdevbpf
Date: Fri Nov 18 2022 - 07:40:29 EST
Hello:
This patch was applied to netdev/net-next.git (master)
by David S. Miller <davem@xxxxxxxxxxxxx>:
On Wed, 16 Nov 2022 19:45:11 +0800 you wrote:
> The caller of del_timer_sync must prevent restarting of the timer, If
> we have no this synchronization, there is a small probability that the
> cancellation will not be successful.
>
> And syzbot report the fellowing crash:
> ==================================================================
> BUG: KASAN: use-after-free in hlist_add_head include/linux/list.h:929 [inline]
> BUG: KASAN: use-after-free in enqueue_timer+0x18/0xa4 kernel/time/timer.c:605
> Write at addr f9ff000024df6058 by task syz-fuzzer/2256
> Pointer tag: [f9], memory tag: [fe]
>
> [...]
Here is the summary with links:
- mrp: introduce active flags to prevent UAF when applicant uninit
https://git.kernel.org/netdev/net-next/c/ab0377803daf
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html