[PATCH v2 0/2] kernfs: Fix UAF in PSI polling when open file is released

From: Chen Ridong
Date: Fri Aug 22 2025 - 03:22:28 EST


From: Chen Ridong <chenridong@xxxxxxxxxx>

This series fixes a use-after-free issue triggered when disabling and
enabling cgroup PSI.

---
v2:
- Add kernfs_get_active_of() to safely acquire active references for
kernfs open files suggested by Tj.
- Split into two patches as suggested by Greg.

Chen Ridong (2):
kernfs: Fix UAF in polling when open file is released
cgroup/psi: Set of->priv to NULL upon file release

fs/kernfs/file.c | 58 +++++++++++++++++++++++++++---------------
kernel/cgroup/cgroup.c | 1 +
2 files changed, 39 insertions(+), 20 deletions(-)

--
2.34.1