On 2023-04-13 05:32, Yu Kuai wrote:
> From: Yu Kuai
>
> Our test reports a uaf for 'mddev->sync_thread':
>
> T1 T2
> md_start_sync
> md_register_thread
> // mddev->sync_thread is set
> raid1d
>md_check_recovery
>
Hi,
在 2023/04/13 23:10, Logan Gunthorpe 写道:
On 2023-04-13 05:32, Yu Kuai wrote:
From: Yu Kuai
Our test reports a uaf for 'mddev->sync_thread':
T1 T2
md_start_sync
md_register_thread
// mddev->sync_thread is set
raid1d
From: Yu Kuai
Our test reports a uaf for 'mddev->sync_thread':
T1 T2
md_start_sync
md_register_thread
// mddev->sync_thread is set
raid1d
md_check_recovery
md_reap_sync_thread