Subject configfs: fix use-after-free of symlink target racing with rmdir
Author vasilisalmpanis@gmail.com
Date 2026-07-30 09:30:24 +0000 UTC
Version
Cc a.hindborg@kernel.org leitao@debian.org linux-fsdevel@vger.kernel.org linux-kernel@vger.kernel.org stable@vger.kernel.org syzbot@syzkaller.appspotmail.com vasilisalmpanis@gmail.com viro@zeniv.linux.org.uk
Patches (2)
Name Content [All]
[PATCH 1/2] configfs: pin the symlink target's dirent instead of chasing ->ci_dentry [Body]
[PATCH 2/2] configfs: unhash the dentry before dropping the item in rmdir [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-07-30
Passed
ID (for dev) 37355700-7434-4f57-9870-f5e1d8ce60d7
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] passed [Log]
[KASAN] Boot test: Base fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] passed [Log]
[KASAN] Build Patched fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] [patched] passed [Log]
[KASAN] Fuzz fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] fa20f6cb6063f7f1a6a56693d4a8713f19058d23 [Config] [patched] passed [Log] [Artifacts]