linux-kernel - Re: [PATCH] scsi: sg: fix slab-use-after-free Read in sg

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <dc9ee4e6-5410-4635-9970-d0b2a5d02d81@acm.org>
Date: Mon, 25 Nov 2024 09:03:32 -0800
From: Bart Van Assche <bvanassche@....org>
To: Suraj Sonawane <surajsonawane0215@...il.com>, dgilbert@...erlog.com
Cc: James.Bottomley@...senPartnership.com, martin.petersen@...cle.com,
 linux-scsi@...r.kernel.org, linux-kernel@...r.kernel.org,
 syzbot+7efb5850a17ba6ce098b@...kaller.appspotmail.com
Subject: Re: [PATCH] scsi: sg: fix slab-use-after-free Read in sg_release

On 11/25/24 6:30 AM, Suraj Sonawane wrote:
> Hello!

Which person are you addressing with this email?

> I wanted to follow up on the patch I submitted. I was wondering if you 
> had a chance to review it and if there are any comments or feedback.

Sending a ping after 5 days is too quick. I think that you should wait
at least a week before sending a ping.

Bart.