Re: [PATCH RFC] ubifs: Fix use-after-free in ubifs_tnc_end_commit

From: Zhihao Cheng
Date: Thu Nov 07 2024 - 20:39:04 EST


在 2024/11/8 6:38, Waqar Hameed 写道:
On Thu, Nov 07, 2024 at 16:39 +0800 Zhihao Cheng <chengzhihao1@xxxxxxxxxx> wrote:

[...]

P.S
I wonder how many systems that might have experienced this
use-after-free and got random memory corruptions (or other security
issues). This bug has been there since v4.20.
D.S
.


Maybe the authentication feature is not widely used.