On Thu, Mar 11, 2021 at 10:40:33PM +0800, [email protected] wrote: > So, register_test_dev_kmod() will return a valid and freed test_dev, and > cause use after free > in function test_kmod_init().
Without looking at the details, in trying to improve the commit log further: Is there a way you can reproduce a real world UAF and crash? If not why not? What is the risk of not merging this commit into the kernel tree. This information is useful for folks to evaluate whether or not users of this module might want to merge this and/or backport it into their testing kernel. If chances of this happening are 0, then this just a theoretical issue. Luis
