Re: Question about patch "fbdev: smscufx: Fix use-after-free in ufx_ops_open()"

2022-10-20 Thread Hyunwoo Kim
Dear, An additional patch has been submitted for the disconnect->open race condition you reported: https://lore.kernel.org/linux-fbdev/20221020200113.GA320044@ubuntu/T/#u Thanks for reporting. Regards, Hyunwoo Kim.

Question about patch "fbdev: smscufx: Fix use-after-free in ufx_ops_open()"

2022-10-11 Thread ChenXiaoSong
Hi Hyunwoo: [patch "fbdev: smscufx: Fix use-after-free in ufx_ops_open()"](https://lore.kernel.org/all/20220925133243.GA383897@ubuntu/T/) fix [CVE-2022-41849](https://nvd.nist.gov/vuln/detail/CVE-2022-41849). If the UAF scenarios is as follows, it seems that [fix path v3](https://lore.kernel

Re: Question about patch "fbdev: smscufx: Fix use-after-free in ufx_ops_open()"

2022-10-11 Thread Hyunwoo Kim
On Tue, Oct 11, 2022 at 10:13:02PM +0800, ChenXiaoSong wrote: > Hi Hyunwoo: > > [patch "fbdev: smscufx: Fix use-after-free in > ufx_ops_open()"](https://lore.kernel.org/all/20220925133243.GA383897@ubuntu/T/) > fix [CVE-2022-41849](https://nvd.nist.gov/vuln/detail/CVE-2022-41849). > > If the UAF