On Tue, 24 Jun 2025 14:38:46 +0800 Edward Adam Davis <[email protected]> wrote:
> If the processing of the tr->events loop fails, the filter that has been > added to filter_head will be released twice in free_filter_list(&head->rcu) > and __free_filter(filter). > > After adding the filter of tr->events, add the filter to the filter_head > process to avoid triggering uaf. Ah that was the kmalloc that failed. Thanks, -- Steve
