syzbot


KASAN: use-after-free Read in sctp_outq_tail
Status: fixed on 2019/03/06 07:43
Reported-by: syzbot+7823fa3f3e2d69341ea8@syzkaller.appspotmail.com
Fix commit: af98c5a7 sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
First crash: 252d, last: 252d

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-linux-next-kasan-gce-root 2019/02/12 06:57 linux-next d4104460 65a0d619 .config log report davem@davemloft.net, linux-kernel@vger.kernel.org, linux-sctp@vger.kernel.org, marcelo.leitner@gmail.com, netdev@vger.kernel.org, nhorman@tuxdriver.com, vyasevich@gmail.com