Re: [RFC v1 0/3] Address potential user-after-free on module unload

From: Greg KH
Date: Tue Feb 05 2019 - 13:42:56 EST


On Tue, Feb 05, 2019 at 02:57:11PM +0000, Kees Cook wrote:
> On Mon, Feb 4, 2019 at 10:09 PM Sven Van Asbroeck <thesven73@xxxxxxxxx> wrote:
> >
> > I think there _might_ be potential use-after-free issues on module unload.

There are loads of issues with module unloading, which is why it pretty
much is a "best effort" type of thing. It never happens automatically
and the only way you can do it is if you have root access, at which
point, there are loads of other things you can do that are much worse :)

thanks,

greg k-h