linux-kernel - Re: [PATCH] pid: Add a judgment for ns null in pid_nr

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <20260104072536.883920-1-wangqing7171@gmail.com>
Date: Sun,  4 Jan 2026 15:25:36 +0800
From: Qing Wang <wangqing7171@...il.com>
To: gaoxiang17@...omi.com,
	oleg@...hat.com,
	viro@...iv.linux.org.uk,
	brauner@...nel.org
Cc: mjguzik@...il.com,
	Liam.Howlett@...cle.com,
	gxxa03070307@...il.com,
	joel.granados@...nel.org,
	linux-kernel@...r.kernel.org,
	lorenzo.stoakes@...cle.com
Subject: Re: [PATCH] pid: Add a judgment for ns null in pid_nr_ns

On Sat, 02 Aug 2025 at 10:21, Xiang Gao <gxxa03070307@...il.com> wrote:
> __task_pid_nr_ns
>         ns = task_active_pid_ns(current);
>         pid_nr_ns(rcu_dereference(*task_pid_ptr(task, type)), ns);
>                 if (pid && ns->level <= pid->level) {

Hi,

There was a bug report about the UAF(tsk->signal) in __task_pid_nr_ns, and I'm
not sure whether it's related to this issue you're discussing. What do you
think?

[syzbot] [perf?] KASAN: slab-use-after-free Read in __task_pid_nr_ns
https://syzkaller.appspot.com/bug?extid=e0378d4f4fe57aa2bdd0

Qing.