Re: [RFC PATCH] media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail
From: Jeffin Philip
Date: Thu Aug 27 2026 - 01:15:30 EST
On Thu, 27 Aug 2026 06:51:21 +0200, Greg KH wrote:
>While "fun", this is not a normal path that users ever will hit. See
>this thread where I propose tainting the kernel if you attempt to do
>this:
> https://lore.kernel.org/r/20260826-bind_taint-v1-0-52b05f4a965c@xxxxxxxxxxxxxxxxxxx
Thanks for the reference. The task hang is not possible
then. However, the UAF will be triggered anyway as we are just simulating
an unbind. Even if the driver's .release is called naturally, if we are
streaming data, it could cause the UAF, no?
Thanks,
Jeffin.