Re: [PATCH v2] loop: don't change loop device under exclusive opener in loop_set_status

Jens Axboe
2026-01-06T12:30:36Z

On Wed, 17 Dec 2025 14:00:40 -0500, Raphael Pinsonneault-Thibeault wrote:
> loop_set_status() is allowed to change the loop device while there
> are other openers of the device, even exclusive ones.
>
> In this case, it causes a KASAN: slab-out-of-bounds Read in
> ext4_search_dir(), since when looking for an entry in an inlined
> directory, e_value_offs is changed underneath the filesystem by
> loop_set_status().
>
> [...]

Applied, thanks!

[1/1] loop: don't change loop device under exclusive opener in loop_set_status
commit: 08e136ebd193eae7d5eff4c66d576c4a2dabdc3f

Best regards,
--
Jens Axboe