Re: KASAN: use-after-free Read in printer_read

2020-06-03 Thread Greg KH
On Tue, Jun 02, 2020 at 04:35:33PM -0400, Kyungtae Kim wrote: > We report a bug (in linux-5.6.11) found by FuzzUSB (a modified version > of syzkaller) > > This bug happened when accessing a deallocated instance in printer_read(). > > printer_read() tries to access lock_printer_io of the printer_d

KASAN: use-after-free Read in printer_read

2020-06-02 Thread Kyungtae Kim
We report a bug (in linux-5.6.11) found by FuzzUSB (a modified version of syzkaller) This bug happened when accessing a deallocated instance in printer_read(). printer_read() tries to access lock_printer_io of the printer_dev instance (f_printer.c:430). However, UAF arises because it had been fre