Re: [PATCH] fhandle: fix UAF due to unlocked ->mnt_ns read in may_decode_fh()
Jann Horn <[email protected]>
| Newsgroups | gmane.linux.kernel.stable,gmane.linux.file-systems,gmane.linux.nfs,gmane.linux.kernel |
|---|---|
| Message-ID | <CAG48ez2kK2dB4Tva0aNdWphV6BS021A4bf6a_cu_yOEJ8Uy=PQ@mail.gmail.com> |
On Wed, Jun 3, 2026 at 9:08 PM Jann Horn <[email protected]> wrote: > (And there's also that weird detail of how, for anonymous namespaces, > the active refcount isn't used and AFAICS never actually drops to > zero...) (Er, nevermind, I missed that anonymous namespaces just have their active refcount set to 0 from the start already.)