cgroup user-after-free

Lixiong Liu (刘利雄) Lixiong.Liu at mediatek.com
Thu Jan 12 21:40:08 PST 2023


> > Root cause: 
> > cgroup_migrate_finish free cset’s cgroup,
> > 
> > but cgroup_sk_alloc use the freed cgroup,
> > 
> > then use-after-free happened.
> 
> Sounds similar to the problem fixed by 07fd5b6cdf3c ("cgroup: Use
> separate
> src/dst nodes when preloading css_sets for migration"). Can you try
> it out?
> 
> Thanks.
> 


Thanks for your quick feedback.


  
But we encountered use-after-free version

already contains this patch.



So, with this patch will also encounter

this use-after-free.

Thanks!



Best regards,
Lixiong Liu


More information about the linux-arm-kernel mailing list