On Fri, Apr 28, 2023 at 02:25:53PM -0400, Theodore Ts'o wrote: > On Fri, Apr 28, 2023 at 11:35:32AM -0300, Jason Gunthorpe wrote: > > > > It has been years now, I think we need to admit a fix is still years > > away. Blocking the security problem may even motivate more people to > > work on a fix. > > Do we think we can still trigger a kernel crash, or maybe even some > more exciting like an arbitrary buffer overrun, via the > process_vm_writev(2) system call into a file-backed mmap'ed region? Jens? You blocked it from io_uring, did you have a specific attack in mind? Jason
