Subject pci: fix UAF and TOCTOU related to dynamic ID
Author gary@garyguo.net
Date 2026-07-06 14:11:13 +0000 UTC
Version
Cc airlied@redhat.com andrew@lunn.ch bhelgaas@google.com cassel@kernel.org dakr@kernel.org davem@davemloft.net dlemoal@kernel.org dri-devel@lists.freedesktop.org driver-core@lists.linux.dev edumazet@google.com gary@garyguo.net gotom@debian.or.jp gregkh@linuxfoundation.org idosch@nvidia.com industrypack-devel@lists.sourceforge.net james.bottomley@hansenpartnership.com jens.taprogge@taprogge.org kuba@kernel.org linux-ide@vger.kernel.org linux-kernel@vger.kernel.org linux-pci@vger.kernel.org linux-scsi@vger.kernel.org martin.petersen@oracle.com netdev@vger.kernel.org pabeni@redhat.com petrm@nvidia.com rafael@kernel.org sashiko-bot@kernel.org vaibhavgupta40@gmail.com yokota@netlab.is.tsukuba.ac.jp zhenzhong.duan@gmail.com
Patches (9)
Name Content [All]
[PATCH v3 1/9] ata: don't store pci_device_id [Body]
[PATCH v3 2/9] nsp32: don't store pci_device_id [Body]
[PATCH v3 3/9] ipack: tpci200: don't store pci_device_id [Body]
[PATCH v3 4/9] mlxsw: don't store pci_device_id [Body]
[PATCH v3 5/9] agp/via: don't rely on address of pci_device_id [Body]
[PATCH v3 6/9] agp/amd-k7: don't rely on address of pci_device_id [Body]
[PATCH v3 7/9] pci: make pci_match_one_device match on ID instead of device [Body]
[PATCH v3 8/9] pci: fix dyn_id add TOCTOU [Body]
[PATCH v3 9/9] pci: fix UAF when probe runs concurrent to dyn ID removal [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-07-06
Passed
ID (for dev) a410191d-cc55-474c-a9af-895d2ca11fb3
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] passed [Log]
[KASAN] Boot test: Base 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] passed [Log]
[KASAN] Build Patched 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] [patched] passed [Log]
[KASAN] Fuzz 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] 8cdeaa50eae8dad34885515f62559ee83e7e8dda [Config] [patched] passed [Log] [Artifacts]