2023-07-31 05:40:35

by Richard Weinberger

[permalink] [raw]
Subject: Re: kernel BUG in __put_mtd_device

----- Ursprüngliche Mail -----
> Von: "Zheng Zhang" <[email protected]>
> An: "Miquel Raynal" <[email protected]>, "richard" <[email protected]>, "Vignesh Raghavendra" <[email protected]>,
> "linux-mtd" <[email protected]>, "linux-kernel" <[email protected]>
> Gesendet: Montag, 31. Juli 2023 01:27:09
> Betreff: kernel BUG in __put_mtd_device

> Miquel, Richard, Vignesh and to whom it may concern:
>
> Hello! We have found a bug in MTD driver in the Linux kernel version 6.2.0
> by Syzkaller with our own templates.
> It's triggered for multiple times. Unfortunately, it doesn't generate a
> reproducer.
> Attached is the report, log generated by syzkaller.
> Please let me know if there is any additional information that I can
> provide to help debug this issue.

Isn't this related to "[PATCH] mtd: fix use-after-free in mtd release"?

Thanks,
//richard


2023-07-31 09:00:54

by Miquel Raynal

[permalink] [raw]
Subject: Re: kernel BUG in __put_mtd_device

Hi Richard,

[email protected] wrote on Mon, 31 Jul 2023 07:35:15 +0200 (CEST):

> ----- Ursprüngliche Mail -----
> > Von: "Zheng Zhang" <[email protected]>
> > An: "Miquel Raynal" <[email protected]>, "richard" <[email protected]>, "Vignesh Raghavendra" <[email protected]>,
> > "linux-mtd" <[email protected]>, "linux-kernel" <[email protected]>
> > Gesendet: Montag, 31. Juli 2023 01:27:09
> > Betreff: kernel BUG in __put_mtd_device
>
> > Miquel, Richard, Vignesh and to whom it may concern:
> >
> > Hello! We have found a bug in MTD driver in the Linux kernel version 6.2.0
> > by Syzkaller with our own templates.
> > It's triggered for multiple times. Unfortunately, it doesn't generate a
> > reproducer.
> > Attached is the report, log generated by syzkaller.
> > Please let me know if there is any additional information that I can
> > provide to help debug this issue.
>
> Isn't this related to "[PATCH] mtd: fix use-after-free in mtd release"?

Yes, probably, we received two patches regarding the same issue, but so
far no agreement on them because none fully fixes the issue
apparently...

Thanks,
Miquèl