7 min read
Linux kernel btrfs use-after-free
A syncfs syscall after operations on a crafted btrfs image triggers a use-after-free reached via mutex_can_spin_on_owner.
Read full articleTags
use-after-free
7 min read
Linux kernel btrfs use-after-free
A syncfs syscall after operations on a crafted btrfs image triggers a use-after-free in try_merge_free_space.
Read full article6 min read
Linux kernel ext4 use-after-free
Mounting a crafted ext4 image, running a few operations, then unmounting triggers a use-after-free in ext4_put_super.
Read full article3 min read
Linux kernel btrfs use-after-free
Mounting a crafted btrfs image, performing some operations, and unmounting leads to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.
Read full article3 min read
Linux kernel btrfs use-after-free
Mounting a crafted btrfs image twice causes an rwsem_down_write_slowpath use-after-free because rwsem_owner_flags returns an already freed task_struct pointer.
Read full article