syzbot


KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen
Status: fixed on 2020/07/17 17:58
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: 9274124f net: stricter validation of untrusted gso packets
First crash: 115d, last: 95d

Cause bisection: introduced by (bisect log):

commit 9d2f67e43b73e8af7438be219b66a5de0cfa8bd9
Author: Jianfeng Tan <jianfeng.tan@linux.alibaba.com>
Date: Sat Sep 29 15:41:27 2018 +0000

  net/packet: fix packet drop as of virtio gso

Crash: KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
linux-4.14 KASAN: slab-out-of-bounds Read in skb_gso_transport_seglen 1 97d 97d 0/1 upstream: reported on 2020/05/07 10:34

Sample crash report:

Crashes (4):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2020/04/19 15:40 upstream 50cc09c1 6dfd45e1 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-kasan-gce-386 2020/04/21 03:26 upstream ae83d0b4 98a9f9e6 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-net-this-kasan-gce 2020/04/19 10:45 net 441870ee 365fba24 .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com
ci-upstream-linux-next-kasan-gce-root 2020/05/08 17:25 linux-next ac935d22 2b98fdbc .config log report syz C davem@davemloft.net, jhs@mojatatu.com, jiri@resnulli.us, kuba@kernel.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, xiyou.wangcong@gmail.com