Re: [PATCH 1/1] tty: n_gsm: Fix use-after-free in gsm_cleanup_mux

From: Starke, Daniel
Date: Thu Sep 26 2024 - 03:44:05 EST


> > [Analysis]
> > gsm_msg on the tx_ctrl_list or tx_data_list of gsm_mux
> > can be freed by multi threads through ioctl,which leads
> > to the occurrence of uaf. Protect it by gsm tx lock.
>
> LGTM. But Daniel might have a different opinion...

Looks also good to me. I did not test it, but this will most likely solve
one of the many multi-threading issues in the n_gsm driver.

Best regards,
Daniel Starke