linux-kernel - Re: [PATCH] zram: fix potential UAF of zram table

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <sbdzv6z5sixmj7fr3jmjwxqce3tbbzvshbb7qgumio4jdahn24@jvvadmtindgs>
Date: Tue, 7 Jan 2025 16:38:36 +0900
From: Sergey Senozhatsky <senozhatsky@...omium.org>
To: Andrew Morton <akpm@...ux-foundation.org>, 
	Kairui Song <kasong@...cent.com>
Cc: linux-mm@...ck.org, Minchan Kim <minchan@...nel.org>, 
	Sergey Senozhatsky <senozhatsky@...omium.org>, linux-block@...r.kernel.org, linux-kernel@...r.kernel.org, 
	stable@...r.kernel.org
Subject: Re: [PATCH] zram: fix potential UAF of zram table

On (25/01/07 14:54), Kairui Song wrote:
> From: Kairui Song <kasong@...cent.com>
> 
> If zram_meta_alloc failed early, it frees allocated zram->table without
> setting it NULL. Which will potentially cause zram_meta_free to access
> the table if user reset an failed and uninitialized device.
> 
> Fixes: 74363ec674cb ("zram: fix uninitialized ZRAM not releasing backing device")
> Cc: <stable@...r.kernel.org>
> Signed-off-by: Kairui Song <kasong@...cent.com>

Reviewed-by:  Sergey Senozhatsky <senozhatsky@...omium.org>