cgroup user-after-free

Lixiong Liu (刘利雄) Lixiong.Liu at mediatek.com
Tue Jan 31 22:04:04 PST 2023


On Fri, 2023-01-13 at 13:40 +0800, lixiong liu wrote:
> > > Root cause: 
> > > cgroup_migrate_finish free cset’s cgroup,
> > > 
> > > but cgroup_sk_alloc use the freed cgroup,
> > > 
> > > then use-after-free happened.
> > 
> > Sounds similar to the problem fixed by 07fd5b6cdf3c ("cgroup: Use
> > separate
> > src/dst nodes when preloading css_sets for migration"). Can you try
> > it out?
> > 
> > Thanks.
> > 
> 
> 
> Thanks for your quick feedback.
> 
> 
>   
> But we encountered use-after-free version
> 
> already contains this patch.
> 
> 
> 
> So, with this patch will also encounter
> 
> this use-after-free.
> 
> Thanks!
> 
> 
  Do you have any suggestion for this issue?

  Best regards,
  Lixiong Liu


More information about the linux-arm-kernel mailing list