linux-kernel - Re: cdrom: cdrom_mrw

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <r7mtqczhwcyt7xwpmvn5k7iwevta46z7xsu7t2y2xxnwlv7byc@ksiuu4zlllod>
Date: Mon, 21 Jul 2025 12:23:14 +0900
From: Sergey Senozhatsky <senozhatsky@...omium.org>
To: Phillip Potter <phil@...lpotter.co.uk>
Cc: Sergey Senozhatsky <senozhatsky@...omium.org>, 
	Christoph Hellwig <hch@...radead.org>, Chris Rankin <rankincj@...il.com>, linux-kernel@...r.kernel.org, 
	linux-block@...r.kernel.org, Jens Axboe <axboe@...nel.dk>
Subject: Re: cdrom: cdrom_mrw_exit() NULL ptr deref

On (25/07/20 12:55), Phillip Potter wrote:
> > I don't have a CD/DVD drive to test this, but from what I can tell
> > the patch looks good to me.  Thanks for taking a look!
> 
> Hi Sergey,
> 
> Just to say, I haven't forgotten this :-) Have run a few tests with the
> patch and so far looks all good.

Hi Phillip,
Thanks for the update!

> Still been unable to replicate the specific issue though.

Hmm that's interesting.  I thought that unplugging a USB cdrom
drive would hit the issue relatively reliably.

> Assuming my testing uncovers nothing else, I will
> revert to Jens with fully crafted patch submission in next day or two.

Sounds like a plan.  Once we have an upstream patch we can cherry-pick
it and roll it out to our LTS kernels (and eventually to our users.)