Re: cgroup user-after-free

From: Lixiong Liu (刘利雄)
Date: Wed Feb 01 2023 - 01:04:36 EST


On Fri, 2023-01-13 at 13:40 +0800, lixiong liu wrote:
> > > Root cause:
> > > cgroup_migrate_finish free cset’s cgroup,
> > >
> > > but cgroup_sk_alloc use the freed cgroup,
> > >
> > > then use-after-free happened.
> >
> > Sounds similar to the problem fixed by 07fd5b6cdf3c ("cgroup: Use
> > separate
> > src/dst nodes when preloading css_sets for migration"). Can you try
> > it out?
> >
> > Thanks.
> >
>
>
> Thanks for your quick feedback.
>
>
>
> But we encountered use-after-free version
>
> already contains this patch.
>
>
>
> So, with this patch will also encounter
>
> this use-after-free.
>
> Thanks!
>
>
Do you have any suggestion for this issue?

Best regards,
Lixiong Liu