Skip to content

fs/namespace: fix NULL pointer dereference in do_lock_mount()#1317

Open
vfsci-bot[bot] wants to merge 1 commit intovfs.base.cifrom
pw/1089768/vfs.base.ci
Open

fs/namespace: fix NULL pointer dereference in do_lock_mount()#1317
vfsci-bot[bot] wants to merge 1 commit intovfs.base.cifrom
pw/1089768/vfs.base.ci

Conversation

@vfsci-bot
Copy link
Copy Markdown

@vfsci-bot vfsci-bot Bot commented May 5, 2026

Series: https://patchwork.kernel.org/project/linux-fsdevel/list/?series=1089768
Submitter: Vineet Agarwal
Version: 1
Patches: 1/1
Message-ID: <20260505095156.178351-1-agarwal.vineet2006@gmail.com>
Base: vfs.base.ci
Lore: https://lore.kernel.org/linux-fsdevel/20260505095156.178351-1-agarwal.vineet2006@gmail.com


Automated by ml2pr

Syzkaller reported a NULL pointer dereference in do_lock_mount()
when calling inode_lock() on a dentry without an associated inode.

where_to_mount() may return a negative dentry (without an inode)
due to concurrent unlink or mount changes. The current code does
not validate this before calling inode_lock(), leading to a crash.

Fix this by checking dentry and dentry->d_inode before acquiring
the inode lock.

Reported-by: syzbot <syzbot@syzkaller.appspotmail.com>
Closes: https://syzkaller.appspot.com/
Signed-off-by: Vineet Agarwal <agarwal.vineet2006@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant