Re: [PATCH v3] configfs: fix slab-UAF Write in config_item_put

[Breno Leitao]

On Thu, Nov 05, 2026 at 05:50:54PM +0100, Drif Abdelmalek Mohamed Said wrote:
> ---
> v3:
>   - Removed redundant null assignment to parent_item

It wasn't redundant, see below.

>  
> +	if (IS_DEADDIR(dir)) {
> +		ret = -ENOENT;
> +		goto out_put_target;
> +	}

I am seeing the following when running this version:

	refcount_t: addition on 0; use-after-free.
	WARNING: lib/refcount.c:34 at refcount_warn_saturate+0x76/0xd0, CPU#1: ln/172
	Call Trace:

Can you help me to understand how this was tested?

Thanks,
--breno