syzbot


KASAN: slab-out-of-bounds Read in bpf_clone_redirect
Status: fixed on 2020/01/28 16:29
Reported-by: syzbot+24bc05f38b3e3dda58ea@syzkaller.appspotmail.com
Fix commit: 7fed98f4a1e6 bpf: reject passing modified ctx to helper functions
First crash: 1032d, last: 869d

Fix bisection: fixed by (bisect log) :
commit 7fed98f4a1e6eb77a5d66ecfdf9345e21df6ac82
Author: Daniel Borkmann <daniel@iogearbox.net>
Date: Thu Jun 7 15:40:03 2018 +0000

  bpf: reject passing modified ctx to helper functions

similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Read in bpf_clone_redirect 1 127d 123d 0/22 auto-closed as invalid on 2022/04/09 13:12
android-414 KASAN: slab-out-of-bounds Read in bpf_clone_redirect C 5 905d 1131d 0/1 public: reported C repro on 2019/04/12 00:01

Sample crash report:

Crashes (11):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2019/11/21 17:24 linux-4.14.y f56f3d0e65ad 8098ea0f .config log report syz C
ci2-linux-4-14 2019/11/01 14:05 linux-4.14.y ddef1e8e3f6e a41ca8fa .config log report syz C
ci2-linux-4-14 2019/10/25 06:47 linux-4.14.y b98aebd29824 d01bb02a .config log report syz C
ci2-linux-4-14 2019/08/30 23:38 linux-4.14.y 01fd1694b93c 9adfa876 .config log report syz C
ci2-linux-4-14 2019/08/28 18:07 linux-4.14.y b5260801526c 1eb076e9 .config log report syz C
ci2-linux-4-14 2019/08/17 04:17 linux-4.14.y 45f092f9e9cb 8fd428a1 .config log report syz C
ci2-linux-4-14 2019/07/19 12:26 linux-4.14.y aea8526edf59 8304907d .config log report syz C
ci2-linux-4-14 2019/12/29 05:34 linux-4.14.y e1f7d50ae3a3 af6b8ef8 .config log report
ci2-linux-4-14 2019/09/28 23:39 linux-4.14.y f6e27dbb1afa eb6b9855 .config log report
ci2-linux-4-14 2019/08/06 23:13 linux-4.14.y b19ffe6e7205 da562c0b .config log report
ci2-linux-4-14 2019/07/19 12:05 linux-4.14.y aea8526edf59 8304907d .config log report