Re: Bug: use-after-free in udf_statfs in fs/udf/super.c:2415

[Kun Hu]

> 
> So this is about your threat model. Writing to the device while a filesystem
> is mounted there is corrupting its cached state - i.e., it is effectively
> equivalent to corrupting memory. Generally only system administrator can do
> this and hence there is not any security vulnerability because the system
> administrator has better means of compromising the machine.
> 
> That being said there are locked down configurations where even root is not
> expected to be able to get full control of the kernel but then you must
> have this properly configured and disabling CONFIG_BLK_DEV_WRITE_MOUNTED is
> one of the things you should do in such case.
> 
> Honza
> -- 
> Jan Kara <jack@xxxxxxxx>
> SUSE Labs, CR


Learning a lot, thanks a lot!

———
thanks,
Kun Hu