Re: [BUG] watch_queue: RCU/info_id overlap leaks kernel stack

From: Jarkko Sakkinen

Date: Wed Oct 28 2026 - 12:00:56 EST


On Wed, Oct 28, 2026 at 11:41:35PM +0800, Zhiyu Zhang wrote:
> We have a short source reproducer, exact config and QEMU results. In
> accordance with the kernel policy, we are not posting the reproducer publicly.
> We can provide it privately if a maintainer requests it. On the vulnerable
> baseline it normally reports the canary, stack/task pointers and two agreeing
> KASLR anchors within a few seconds.

This is public nobody cares. Likely I could make the reproducec with a
couple of prompts.

What if you instead spent some time with your "short reproducer" and figure
out how to make equal reproducer with bash and keyctl? It's a good
habbit and helps to check the relevance because you have to think things
through.

This announcement is just total waste of time and energy anyhow.

Br, Jarkko