Re: [syzbot] KASAN: use-after-free Read in fuse_dev_poll

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: Miklos Szeredi <miklos@xxxxxxxxxx>
Subject: Re: [syzbot] KASAN: use-after-free Read in fuse_dev_poll
From: Jens Axboe <axboe@xxxxxxxxx>
Date: Tue, 24 Jan 2023 09:37:21 -0700
Cc: linux-fsdevel@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, syzkaller-bugs@xxxxxxxxxxxxxxxx, syzbot <syzbot+d3b704fabd7f02206294@xxxxxxxxxxxxxxxxxxxxxxxxx>, io-uring@xxxxxxxxxxxxxxx
In-reply-to: <CAJfpegteWVfJ8CLATjhk7==iLmqyZT_ao8Hs2JaNKdbgceXZYw@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; Linux aarch64; rv:102.0) Gecko/20100101 Thunderbird/102.6.0

On 1/24/23 9:29 AM, Miklos Szeredi wrote:
> Hi Jens,
> 
> Forwarding, since it looks like io_uring is the culprit: vfs_poll() is
> called by io_poll_check_events() on an already released file.

We had a bad patch around that time, pretty sure that's what's
triggering this one too as it's not a recent kernel.

#syz invalid

-- 
Jens Axboe

References:
- [syzbot] KASAN: use-after-free Read in fuse_dev_poll
  - From: syzbot
- Re: [syzbot] KASAN: use-after-free Read in fuse_dev_poll
  - From: Miklos Szeredi

Prev by Date: Re: [syzbot] KASAN: use-after-free Read in fuse_dev_poll
Next by Date: Re: [RESEND RFC PATCH v1 00/20] mm: process/cgroup ksm support
Previous by thread: Re: [syzbot] KASAN: use-after-free Read in fuse_dev_poll
Next by thread: [syzbot] [hfs?] INFO: task hung in hfs_mdb_commit
Index(es):
- Date
- Thread

[Index of Archives] [Linux Ext4 Filesystem] [Union Filesystem] [Filesystem Testing] [Ceph Users] [Ecryptfs] [NTFS 3] [AutoFS] [Kernel Newbies] [Share Photos] [Security] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux Cachefs] [Reiser Filesystem] [Linux RAID] [NTFS 3] [Samba] [Device Mapper] [CEPH Development]

Powered by Linux