On Mon, Oct 10 2022 at 10:41P -0400,
Luo Meng wrote:
> From: Luo Meng
>
> If dm_get_device() create dd in multipath_message(),
> and then call table_deps() after dm_put_table_device(),
> it will lead to concurrency UAF bugs.
>
> One of the concurrency UAF can be shown as below:
>
> (
On Mon, Oct 10 2022 at 10:39P -0400,
Luo Meng wrote:
> From: Luo Meng
>
> When dm_resume() and dm_destroy() are concurrent, it will
> lead to UAF.
>
> One of the concurrency UAF can be shown as below:
>
> use free
> do_resume
在 2022/9/20 17:20, Wu Guanghao 写道:
>
>
> 在 2022/9/16 2:17, Benjamin Marzinski 写道:
>> On Thu, Sep 15, 2022 at 02:56:36PM +0800, Wu Guanghao wrote:
>>> Sorry for the late feedback.
>>>
>>> The version we are currently testing is 0.8.4, so we only merge the
>>> first 3 patches in this series of pa
On Thu, Oct 13, 2022 at 5:38 AM Mel Gorman wrote:
>
> On Wed, Oct 05, 2022 at 11:03:39AM -0700, Yang Shi wrote:
> > Since v5.13 the page bulk allocator was introduced to allocate order-0
> > pages in bulk. There are a few mempool allocator callers which does
> > order-0 page allocation in a loop,
On Wed, Oct 05, 2022 at 11:03:39AM -0700, Yang Shi wrote:
> Since v5.13 the page bulk allocator was introduced to allocate order-0
> pages in bulk. There are a few mempool allocator callers which does
> order-0 page allocation in a loop, for example, dm-crypt, f2fs compress,
> etc. A mempool page