diff options
| author | Breno Leitao <leitao@debian.org> | 2026-08-26 03:47:05 -0700 |
|---|---|---|
| committer | Breno Leitao <leitao@debian.org> | 2026-10-16 09:17:20 -0700 |
| commit | 6b1b324e96dce23de8e204e277258ddc46d8d2ca (patch) | |
| tree | 7b05e16b4b1a2690b8d3be9a4a88ab4c7b3dda60 /scripts/Makefile.thinlto | |
| parent | 77b20a890a20c943f55d4120f0bcba838b827874 (diff) | |
| download | linux-6b1b324e96dce23de8e204e277258ddc46d8d2ca.tar.gz linux-6b1b324e96dce23de8e204e277258ddc46d8d2ca.zip | |
selftests/configfs: race symlink against rmdir of the target
configfs_rmdir() drops the last reference to an item while its dentry is
still hashed, so a symlink(2) resolving that target takes a reference on
freed memory. syzbot reported it [1].
Race mkdir/rmdir of a target against symlink/unlink of a link to it,
watching /sys/kernel/warn_count.
Fails until the fix [2] lands.
Link: https://syzkaller.appspot.com/bug?extid=6b16e3d085833cbf3e25 [1]
Link: https://lore.kernel.org/all/20260730093435.195441-1-vasilisalmpanis@gmail.com/ [2]
Link: https://patch.msgid.link/20260826-config_selftest-v1-4-e364b07e91ac@debian.org
Signed-off-by: Breno Leitao <leitao@debian.org>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions