syzbot


KASAN: use-after-free Read in j1939_xtp_rx_dat_one (2)
Status: upstream: reported on 2021/05/17 14:22
Reported-by: syzbot+45199c1b73b4013525cf@syzkaller.appspotmail.com
Fix commit: 2030043e616c can: j1939: fix Use-after-Free, hold skb ref while in use
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386 ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32]
First crash: 81d, last: 14d
similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in j1939_xtp_rx_dat_one 3 208d 279d 0/22 auto-closed as invalid on 2021/05/05 21:31

Sample crash report:

Crashes (3):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-kasan-gce-root 2021/07/11 22:53 upstream 98f7fdced2e0 8f5a7b8c .config log report info KASAN: use-after-free Read in j1939_xtp_rx_dat_one
ci-qemu-upstream-386 2021/07/19 06:13 upstream 2734d6c1b1a0 f115ae98 .config log report info KASAN: use-after-free Read in j1939_xtp_rx_dat_one
ci-qemu-upstream-386 2021/05/13 14:16 upstream c06a2ba62fc4 ecb594cb .config log report info KASAN: use-after-free Read in j1939_xtp_rx_dat_one