syzbot


KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs
Status: fixed on 2019/12/13 00:31
Reported-by: syzbot+9cb7edb2906ea1e83006@syzkaller.appspotmail.com
Fix commit: ab5b526d net: genetlink: always allocate separate attrs for dumpit ops
First crash: 417d, last: 417d

Cause bisection: introduced by (bisect log) :
commit 75cdbdd089003cd53560ff87b690ae911fa7df8e
Author: Jiri Pirko <jiri@mellanox.com>
Date: Sat Oct 5 18:04:37 2019 +0000

  net: ieee802154: have genetlink code to parse the attrs during dumpit

Crash: KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in __cfg8NUM_wpan_dev_from_attrs (2) C error done 5 145d 144d 17/17 fixed on 2020/11/16 12:12

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci-upstream-net-kasan-gce 2019/10/06 23:28 net-next 056ddc38 f3f7d9c8 .config log report syz C alex.aring@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, linux-wpan@vger.kernel.org, netdev@vger.kernel.org, stefan@datenfreihafen.org
ci-upstream-net-kasan-gce 2019/10/06 22:38 net-next 056ddc38 f3f7d9c8 .config log report alex.aring@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, linux-wpan@vger.kernel.org, netdev@vger.kernel.org, stefan@datenfreihafen.org
ci-upstream-net-kasan-gce 2019/10/06 22:32 net-next 056ddc38 f3f7d9c8 .config log report alex.aring@gmail.com, davem@davemloft.net, linux-kernel@vger.kernel.org, linux-wpan@vger.kernel.org, netdev@vger.kernel.org, stefan@datenfreihafen.org