Received-SPF: pass (google.com: domain of linux-kernel+bounces-12485-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.48.161 as permitted sender) client-ip=147.75.48.161;
From: "Tian, Kevin" <kevin.tian@intel.com>
To: Zhang Zhiyu <zhiyuzhang999@gmail.com>, "linux-kernel@vger.kernel.org"
	<linux-kernel@vger.kernel.org>, "iommu@lists.linux.dev"
	<iommu@lists.linux.dev>, "jgg@ziepe.ca" <jgg@ziepe.ca>, "joro@8bytes.org"
	<joro@8bytes.org>, "will@kernel.org" <will@kernel.org>,
	"robin.murphy@arm.com" <robin.murphy@arm.com>
Subject: RE: A bug was found in Linux Kernel 6.6+: KASAN: slab-use-after-free
 in iommufd_test (with POC)
Thread-Topic: A bug was found in Linux Kernel 6.6+: KASAN: slab-use-after-free
 in iommufd_test (with POC)
Thread-Index: AQHaOKOCc1QFGb+hlEeHePFloAgJCbC+TMPA
Date: Thu, 28 Dec 2023 07:28:32 +0000
Message-ID: <BN9PR11MB52761AA391479A55533BFE718C9EA@BN9PR11MB5276.namprd11.prod.outlook.com>
References: <CALf2hKsJjDY3OhtMCxhHh7rS=2S4Oq9Ns=t-NFq1MPD=f0K02Q@mail.gmail.com>
In-Reply-To: <CALf2hKsJjDY3OhtMCxhHh7rS=2S4Oq9Ns=t-NFq1MPD=f0K02Q@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?utf-8?B?V0xLSWdmUVo1ZWxHSTBMVGRqd2Q1S1pMQytJR242WWFudzN0a2lHTDdGQVdO?=
 =?utf-8?B?M3MzWVYwbmJnaFk4NFF4dld3SFcxM1prbllycjZVZzEvK2U2Z0FidzVTcmRp?=
 =?utf-8?B?QzBXeDhDUlRlWi9UdlR6eXdmanhaM0Mxc0NFWE5nRHU4djlDS3ZDd2g4K2tQ?=
 =?utf-8?B?ZjFERmwrRDlyQTBpUXQrVDlVZHN5VkhkUWEvVk0wYktidkNTcll2amFxSncx?=
 =?utf-8?B?UGcxQ1FDbkRWdTVTbjlwNHFBQ002NjFyS3RONDdodFFuMWozbUVBblFYelVF?=
 =?utf-8?B?MVVjVjFmK3Nrc05lVVhyMzF6cExkczgwS0U1SGpPUGtqNFpoY0xxYlRiK2RH?=
 =?utf-8?B?QVlOaHVuYXJiUERhRGpTQkRaZjgwblFsNjdMRm9pYWxja2lQMjU2MTRuQk1S?=
 =?utf-8?B?NlhJOXdKWTJQQzNHQzJKby9kY0dxUnBoKzFmclozeERObG8vSjJVQXJSRFdQ?=
 =?utf-8?B?WlNPUGlFOEJXOWZjdW5LWEM1TlVWR2xVUVYrRlptbGZMMkd5RytzWTZyWmdL?=
 =?utf-8?B?S254KzQva2ZlK1JncFdtZmJMUmpDTHM5T1l6T3RURjlLN241UW8ySlBGaWwr?=
 =?utf-8?B?WnQ2dkZCUWhzSTVDZ0RGSXR0NktTUUc0bC9mNk5YR0JSNEZ3R2c3RFc1Nzd2?=
 =?utf-8?B?bmowZ2VlNjFCblBDVHV2SVpJbGVHdUwvdEpsWTZjcWs5WS80ZjZ5UXhPZkJh?=
 =?utf-8?B?VnU3NUVQckxXWkFWa3dDZys3RDFvUlJEYUV3U1NoOEtyaDh5M3EwNGh6MmM3?=
 =?utf-8?B?M2ZlTFFJVW9XUDA0QnBIUjRKUTZFZzFCeTVTYjBwa2NnL3hwZjRhY0ZNaTJ4?=
 =?utf-8?B?WkpCc0tFd1BGNVlwNjF1QkNNUWN5a0pLMWV2cmgwREFKQzdER01CbkxRMlMr?=
 =?utf-8?B?SzN2dWZjU3dhNHFFU0RCL0FUNUNkdjh3THZCNG12TjZlYklnOVJ0M3l1MWtn?=
 =?utf-8?B?bC82R2NvZThuSHd5Y3JTTnBtSThIaGZQUGw4SFQyVFM2UmUyTzBqd1FzQ3pC?=
 =?utf-8?B?MlZCYXlRSkl0djg5Y3NRZjlacncwdlBtckJZYmtvY1l0ZUtHUnRBOUM0T3Nx?=
 =?utf-8?B?d2hmWEJralJPd0owSWpGdzliNWg3Wm93cWlER29QKzJPTDRJTGtlbHBXWVR4?=
 =?utf-8?B?dmg2T1BiTEdKSmZDWlVOWjl5UkxRYlBQUGVqbEdsREJWMFV2VzBNRFRxYXEx?=
 =?utf-8?B?SGZGZ3NCNzBsenNTcTlrTFFkZDZJbUw2SWxkQ1RjVDh1cHJIb0U3OGRGRUhr?=
 =?utf-8?B?ejU3bnVScVpUQ0dJUFZzNHZRRWhkczdEMGZkZjFkbjdFU3NTdW9HcEEyUmkx?=
 =?utf-8?B?VlhOcXNIUXpFQStGUmROdThlbHNBU3R2WW1EdzNtSU1zSEVvMVJZSHMzd3ZY?=
 =?utf-8?B?SXNQNFRxRnZCMjVXeGRTZC9DVUNmNE9lSkdmSXUxSnRSWWE2eEpiT0YzWjc4?=
 =?utf-8?B?UVN4V3BxVk9EckdOVjdDZ3NIQkV1TVhrcVprN2FPeHBPS0wrVmYxbHR5VTFv?=
 =?utf-8?B?S25KeXhGT1cyY2hDUVRQZ1h2V2xXYjZaNFVJK0NrTHFNa0pGWnN3ZThURy9E?=
 =?utf-8?B?d3hvSkRCTkhZQ1BqN0FhZ3ZIcWl6TjQ5Q2V6eENZZHNHb1BnTTlDdTBzYnF1?=
 =?utf-8?B?VUcrVmR1dm5GZ01SRFhrcTNTYWFYSlpkcHhwNnNWaGRSNnZVK0JiS1dPN1Rw?=
 =?utf-8?B?UW0xZ21xTUdNQ2tPV1ZMZ2ZpVUxLMDFaMDI2NW1PQ2tSdjdoK1c1Vm9URjlu?=
 =?utf-8?B?VXRmQnpLTUxnd1NwVy90RmZXamtUV0dyWVJBbkRyYXVUV2lFb0c1MmRFR1hV?=
 =?utf-8?B?bS9zNDd6SW5DT1JiaWlHeXdvMGVXMlJ2b2I2L1RydElTWmZEWkoySnBaTU9o?=
 =?utf-8?B?dWdtSUN1V3ZuMXVLMTVJU1lqdXovOWUyQVhXYmF4aThzSXc5SEI5M1p4VEVH?=
 =?utf-8?B?eXpzelhsSkE4MXp3Q2hZZkdIY3RzZTU1OTFYRFgwMUJkSGRjZEpmYWFRQ1VE?=
 =?utf-8?B?d2diMlBpUUVmNmF6Z2ZwQjNDdGsyZGNYVlMzL1VGempKTGM4N3lpeCtnL3dL?=
 =?utf-8?B?OFVVQVdCam9EMU9qTFZ5L3I1M3U1WG5jSHRxMGtSREhQOTlROEx5RFZqWFZB?=
 =?utf-8?Q?SDo91rLPUI8+qdDTKMdvr/qnt?=
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Precedence: bulk
X-Mailing-List: linux-kernel@vger.kernel.org
List-Id: <linux-kernel.vger.kernel.org>
List-Subscribe: <mailto:linux-kernel+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:linux-kernel+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN9PR11MB5276.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: bab5e6c5-a14e-4d0f-d149-08dc07769866
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Dec 2023 07:28:32.3568
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: CMsYLt9ZQI+u42FLospcEDxS+plo8X3K83phqozYYkAx0Fli3Eor9DjPn2EaDP6vvESPn95sZQqJJa5u/IKQ3Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR11MB4568
X-OriginatorOrg: intel.com
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