Hello:
This patch was applied to jaegeuk/f2fs.git (dev)
by Jaegeuk Kim <[email protected]>:
On Wed, 7 Jan 2026 19:22:18 +0800 you wrote:
> As syzbot reported an use-after-free issue in f2fs_write_end_io().
>
> It is caused by below race condition:
>
> loop device umount
> - worker_thread
> - loop_process_work
> - do_req_filebacked
> - lo_rw_aio
> - lo_rw_aio_complete
> - blk_mq_end_request
> - blk_update_request
> - f2fs_write_end_io
> - dec_page_count
> - folio_end_writeback
> - kill_f2fs_super
> - kill_block_super
> - f2fs_put_super
> : free(sbi)
> : get_pages(, F2FS_WB_CP_DATA)
> accessed sbi which is freed
>
> [...]
Here is the summary with links:
- [f2fs-dev] f2fs: fix to avoid UAF in f2fs_write_end_io()
https://git.kernel.org/jaegeuk/f2fs/c/ce2739e482bc
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
_______________________________________________
Linux-f2fs-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/linux-f2fs-devel
