Subject bpf: Fix UAF due to concurrent consumption of waiting_for_gp_ttrace
Author pulehui@huaweicloud.com
Date 2026-08-27 08:40:13 +0000 UTC
Version
Cc andrii@kernel.org ast@kernel.org bpf@vger.kernel.org daniel@iogearbox.net eddyz87@gmail.com emil@etsalapatis.com houtao@huaweicloud.com ihor.solodrai@linux.dev jolsa@kernel.org linux-kernel@vger.kernel.org martin.lau@linux.dev memxor@gmail.com pulehui@huawei.com pulehui@huaweicloud.com song@kernel.org yonghong.song@linux.dev
Patches (1)
Name Content [All]
[PATCH bpf v2] bpf: Fix UAF due to concurrent consumption of waiting_for_gp_ttrace [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-08-27
Passed
ID (for dev) cfb9c978-92e2-4560-99ce-e190400b8512
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base ce6dcd0aed185432d02cafc82b738318af257ccd [Config] passed [Log]
[KASAN] Boot test: Base ce6dcd0aed185432d02cafc82b738318af257ccd [Config] passed [Log]
[KASAN] Build Patched ce6dcd0aed185432d02cafc82b738318af257ccd [Config] [patched] passed [Log]
[KASAN] Boot test: Patched ce6dcd0aed185432d02cafc82b738318af257ccd [Config] [patched] passed [Log]
[KASAN] Previous reproducers ce6dcd0aed185432d02cafc82b738318af257ccd [Config] ce6dcd0aed185432d02cafc82b738318af257ccd [Config] [patched] passed [Log]
↳ BUG: unable to handle kernel NULL pointer dereference in rcu_core passed [Log] passed [Log]
↳ BUG: unable to handle kernel paging request in corrupted passed [Log] passed [Log]
↳ WARNING in mntput_no_expire_slowpath passed [Log] passed [Log]
↳ kernel BUG in free_percpu passed [Log] passed [Log]
[KASAN] Fuzz ce6dcd0aed185432d02cafc82b738318af257ccd [Config] ce6dcd0aed185432d02cafc82b738318af257ccd [Config] [patched] passed [Log] [Artifacts]