v1
2026-10-10
KASAN 检测 kfree_rcu 双重释放 · v1
kfree_rcu_sheaf() 入队对象时不经过 KASAN hook，导致别处双重释放的对象被静默投毒掩盖；本系列补上 hook，使 KASAN 能立即报告此类双重释放并新增 KUnit 测试。
原始补丁链接
子 Patch（2）
1/2
mm/kasan: Detect double-free involving kfree_rcu_sheaf().
[mm/kasan: Detect double-free involving kfree_rcu_sheaf().] [patchwork series v1] submitter=Kuniyuki Iwashima patches (2): [1/2] mm/kasan: Detect double-free involving kfree_rcu_sheaf(). [2/2] mm/
2/2
mm/kasan/kunit: Add double-free tests involving kfree_rcu_sheaf().
The new test cases verify that KASAN immediately detects all three combinations of double-free involving kfree_rcu_sheaf(): 1. kmem_cache_free() -> kfree_rcu() 2. kfree_rcu() -> kmem_cache_