Re: [PATCH] netfs: Fix UAF in netfs_unbuffered_write() on failed preparation
David Howells <[email protected]> Tue, 23 Jun 2026 17:10:53 +0100
| Newsgroups | dev.linux.lists.netfs,org.kernel.vger.linux-fsdevel,org.kernel.vger.linux-kernel |
|---|---|
| Organization | Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 |
| Message-ID | <[email protected]> |
ChenXiaoSong <[email protected]> wrote: > After applying this patch, I can still reproduce the use-after-free issue. Can you get some tracing? I have a suspicion it's a refcount bug. The following tracepoints would be useful: echo 1 > /sys/kernel/tracing/events/netfs/netfs_read/enable echo 1 > /sys/kernel/tracing/events/netfs/netfs_write/enable echo 1 > /sys/kernel/tracing/events/netfs/netfs_rreq/enable echo 1 > /sys/kernel/tracing/events/netfs/netfs_sreq/enable echo 1 > /sys/kernel/tracing/events/netfs/netfs_failure/enable echo 1 > /sys/kernel/tracing/events/error_report/enable And if you can capture this, can you compress the resulting trace and send it to me? Thanks, David