Fwd: Possible null pointer dereference caused by vmstat_start()

2020-05-13 Thread Dongyang Zhan
发件人: Dongyang Zhan Date: 2020年5月3日周日 下午1:45 Subject: Possible null pointer dereference caused by vmstat_start() To: Cc: In Linux 4.10.17, vmstat_start() stores the results of v = kmalloc(stat_items_size, GFP_KERNEL) in m->private = v before security check. If m->private is accessed,

Possible null pointer dereference in smp_init_package_map()

2020-05-03 Thread Dongyang Zhan
Hi, I am a security researcher, my name is Dongyang Zhan. I found a potential bug. I hope you can help me to confirm it. Thank you. In Linux 4.10.17, smp_init_package_map() in /arch/x86/kernel/smpboot.c does not handle the failure of memory allocation, which may cause a null pointer

Possible memory leak in unxz()

2020-05-03 Thread Dongyang Zhan
Hi, I am a security researcher, my name is Dongyang Zhan. I found a potential bug. I hope you can help me to confirm it. Thank you. Possible memory leak in Linux 4.10.17. The function unxz() in /lib/decompress_unxz.c forgets to free the pointer 'in', when the statement if (fi