Re: [BUG] watch_queue: RCU/info_id overlap leaks kernel stack

[Bradley Morgan]

On 29 October 2026 12:05:02 GMT, Zhiyu Zhang <zhiyuzhang999@xxxxxxxxx>
wrote:
>Hi Greg,
>
>> The documentation also says that a patch should be sent which I can't
>> seem to find here, am I missing it somewhere?
>
>I'm sorry for miss-cc you. The patch for the watch_queue bug can be found
>here,
>which just got reviewed by Bradley Morgan <brads@xxxxxxxxxxxxxx>:
>https://lore.kernel.org/lkml/20261029054136.1174216-1-zhiyuzhang999@xxxxxxxxx/

Why CC security@k.o for a ai generated bug?

Well, this patch looks okay to me.

>
>Another patch candidate for the relevant netdev bug, which combined as
>the lpe, can be found in this email thread:
>https://lore.kernel.org/netdev/CALf2hKtiCaiabDQGpm+jzy7VKgMr78eQTKGsN10aXp0JfaOhLA@xxxxxxxxxxxxxx/
>
>I am waiting for the maintainers' approval to send that patch.
>
>Bests,
>Zhiyu
>
>Greg KH <greg@xxxxxxxxx> 于2026年10月29日周四 14:43写道：
>
>
>>
>> On Thu, Oct 29, 2026 at 01:06:28AM +0800, Zhiyu Zhang wrote:
>> > We will send the reproducers (including the complete exp for lpe) to
>you
>> > and the relevant maintainers privately. I understand your point that a
>> > similar reproducer can likely be recreated with a few LLM prompts.
>> > Nevertheless, Documentation/process/security-bugs.rst says not to
>> > publish a reproducer for an AI-assisted finding, so we are keeping it
>off-list.
>> > The same guidance says that AI-assisted findings must be treated as
>public,
>> > which is why the report was posted publicly.
>>
>> The documentation also says that a patch should be sent which I can't
>> seem to find here, am I missing it somewhere?
>>
>> thanks,
>>
>> greg k-h
>
>

--- Thanks!