[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <7bdc8382-cb71-4fc4-ae59-14682e808050@gmail.com>
Date: Wed, 27 May 2026 23:09:28 -0500
From: Jacob Bachmeyer <jcb62281@...il.com>
To: oss-security@...ts.openwall.com,
Prénom? Ahmed <ahmedabdelmoumen05@...il.com>,
netdev@...r.kernel.org, linux-kernel@...r.kernel.org, security@...nel.org
Subject: Re: Linux: DMA-after-unmap race in ZCRX via
netif_rxq_cleanup_unlease() ordering inversion (netkit + page_pool)
On 5/27/26 17:53, Prénom? Ahmed wrote:
>
> Hello,
>
> I would like to report a source-proven teardown ordering bug in the
> Linux kernel that can lead to a DMA-after-unmap race condition
> involving ZCRX (io_uring zero-copy receive), page_pool, and netkit
> queue leasing.
>
> ***Reporter:** Ahmed Abdelmoemen **Discovery Date:** 2026-05-26
> **Kernel Version:** Linux 7.1.0-rc3*
>
> Executive Summary
>
> [...] I am happy to provide more details or assist with testing.
>
This report reads like the product of an "AI" system. What "AI"
assisted you in preparing this report?
[I am sending this to the lists to ensure that everyone will know that
this question has been asked, in an effort to avoid deluging the
reporter with this question.]
-- Jacob
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
