Re: [PATCH v2] cgroup: prevent css_set UAF after namespace publication

[Tejun Heo]

Hello, Jeremy.

On Thu, Sep 24, 2026 at 11:10:37AM +0000, Jeremy Jean wrote:
> copy_cgroup_ns() sets the root of a new cgroup namespace to the parent's
> css_set. When the child is created in a different cgroup,
> cgroup_post_fork() replaces that root with the child's css_set after the
> namespace is visible.

Looks good to me.

Acked-by: Tejun Heo <tj@xxxxxxxxxx>

Can you repost with the namespace maintainers cc'd (Christian Brauner and
the NAMESPACES entry in MAINTAINERS)? I'd like their acks too.

Thanks.

--
tejun