linux-kernel - Re: Re: Re: [PATCH] lib/test_kmod: Fix a use after free in register_test_dev

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20210311144645.GU4332@42.do-not-panic.com>
Date:   Thu, 11 Mar 2021 14:46:45 +0000
From:   Luis Chamberlain <mcgrof@...nel.org>
To:     lyl2019@...l.ustc.edu.cn
Cc:     linux-kernel@...r.kernel.org
Subject: Re: Re: Re: [PATCH] lib/test_kmod: Fix a use after free in
 register_test_dev_kmod

On Thu, Mar 11, 2021 at 10:40:33PM +0800, lyl2019@...l.ustc.edu.cn wrote:
> So, register_test_dev_kmod() will return a valid and freed test_dev, and cause use after free
> in function test_kmod_init().

Without looking at the details, in trying to improve the commit log
further:

Is there a way you can reproduce a real world UAF and crash? If not why not?
What is the risk of not merging this commit into the kernel tree. This
information is useful for folks to evaluate whether or not users of this
module might want to merge this and/or backport it into their testing
kernel.

If chances of this happening are 0, then this just a theoretical issue.

  Luis