Re: Re: Re: [PATCH] lib/test_kmod: Fix a use after free in register_test_dev_kmod

From: Luis Chamberlain
Date: Thu Mar 11 2021 - 09:47:27 EST


On Thu, Mar 11, 2021 at 10:40:33PM +0800, lyl2019@xxxxxxxxxxxxxxxx wrote:
> So, register_test_dev_kmod() will return a valid and freed test_dev, and cause use after free
> in function test_kmod_init().

Without looking at the details, in trying to improve the commit log
further:

Is there a way you can reproduce a real world UAF and crash? If not why not?
What is the risk of not merging this commit into the kernel tree. This
information is useful for folks to evaluate whether or not users of this
module might want to merge this and/or backport it into their testing
kernel.

If chances of this happening are 0, then this just a theoretical issue.

Luis