Re: KASAN: vmalloc-out-of-bounds Write in vfree_atomic

From: Namjae Jeon

Date: Wed Mar 11 2026 - 06:57:40 EST


> ### Proposed Fix:
>
> The solution is natively simple: nullify `sbi->vol_utbl` directly inside `exfat_free_upcase_table()` after freeing it. This safely converts the secondary asynchronous `kvfree` into a no-op.
>
> ```c
> void exfat_free_upcase_table(struct exfat_sb_info *sbi)
> {
> kvfree(sbi->vol_utbl);
> + sbi->vol_utbl = NULL;
> }
> ```
It was already fixed back in early 2025 with commit 1f3d9724e16d
('exfat: fix double free in delayed_free').