On Tue, Dec 3, 2024 at 9:25 AM Kasireddy, Vivek
wrote:
> > Julian Orth reported at
> > https://bugzilla.kernel.org/show_bug.cgi?id=219106 that
> Thank you for reporting this bug.
>
> > udmabuf_create() checks for F_SEAL_WRITE in a racy way, so a udmabuf
> > can end up holding references to pages i
Hi Jann, Julian,
> Subject: udmabuf: check_memfd_seals() is racy
>
> Hi!
>
> Julian Orth reported at
> https://bugzilla.kernel.org/show_bug.cgi?id=219106 that
Thank you for reporting this bug.
> udmabuf_create() checks for F_SEAL_WRITE in a racy way, so a udmabuf
Hi!
Julian Orth reported at
https://bugzilla.kernel.org/show_bug.cgi?id=219106 that
udmabuf_create() checks for F_SEAL_WRITE in a racy way, so a udmabuf
can end up holding references to pages in a write-sealed memfd, which
theoretically breaks one of the security properties of memfd sealing.
See a
