linux-kernel - Re: [PATCH -next v2] ext4: fix use-after-free in ext4_search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <164899700423.964485.9819897021180386715.b4-ty@mit.edu>
Date:   Sun,  3 Apr 2022 10:53:19 -0400
From:   "Theodore Ts'o" <tytso@....edu>
To:     adilger.kernel@...ger.ca, Ye Bin <yebin10@...wei.com>,
        linux-ext4@...r.kernel.org
Cc:     "Theodore Ts'o" <tytso@....edu>, lczerner@...hat.com,
        linux-kernel@...r.kernel.org, jack@...e.cz
Subject: Re: [PATCH -next v2] ext4: fix use-after-free in ext4_search_dir

On Thu, 24 Mar 2022 14:48:16 +0800, Ye Bin wrote:
> We got issue as follows:
> EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
> ==================================================================
> BUG: KASAN: use-after-free in ext4_search_dir fs/ext4/namei.c:1394 [inline]
> BUG: KASAN: use-after-free in search_dirblock fs/ext4/namei.c:1199 [inline]
> BUG: KASAN: use-after-free in __ext4_find_entry+0xdca/0x1210 fs/ext4/namei.c:1553
> Read of size 1 at addr ffff8881317c3005 by task syz-executor117/2331
> 
> [...]

Applied, thanks!

[1/1] ext4: fix use-after-free in ext4_search_dir
      commit: 44c0286d878598b59225b95596e8a19b3516fafc

Best regards,
-- 
Theodore Ts'o <tytso@....edu>