Re: [BUG] watch_queue: RCU/info_id overlap leaks kernel stack

[Zhiyu Zhang]

Hi Greg,

> The documentation also says that a patch should be sent which I can't
> seem to find here, am I missing it somewhere?

I'm sorry for miss-cc you. The patch for the watch_queue bug can be found here,
which just got reviewed by Bradley Morgan <brads@xxxxxxxxxxxxxx>:
https://lore.kernel.org/lkml/20261029054136.1174216-1-zhiyuzhang999@xxxxxxxxx/

Another patch candidate for the relevant netdev bug, which combined as
the lpe, can be found in this email thread:
https://lore.kernel.org/netdev/CALf2hKtiCaiabDQGpm+jzy7VKgMr78eQTKGsN10aXp0JfaOhLA@xxxxxxxxxxxxxx/

I am waiting for the maintainers' approval to send that patch.

Bests,
Zhiyu

Greg KH <greg@xxxxxxxxx> 于2026年10月29日周四 14:43写道：


>
> On Thu, Oct 29, 2026 at 01:06:28AM +0800, Zhiyu Zhang wrote:
> > We will send the reproducers (including the complete exp for lpe) to you
> > and the relevant maintainers privately. I understand your point that a
> > similar reproducer can likely be recreated with a few LLM prompts.
> > Nevertheless, Documentation/process/security-bugs.rst says not to
> > publish a reproducer for an AI-assisted finding, so we are keeping it off-list.
> > The same guidance says that AI-assisted findings must be treated as public,
> > which is why the report was posted publicly.
>
> The documentation also says that a patch should be sent which I can't
> seem to find here, am I missing it somewhere?
>
> thanks,
>
> greg k-h