KASAN: use-after-free Read in ext4_xattr_set_entry

Status: closed as invalid on 2018/07/29 11:55
Subsystems: ext4
[Documentation on labels]
First crash: 2934d, last: 2934d
▶ ▼ Similar bugs (18)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (3) 19 syz, C error 1 1625d 2110d 0/1 upstream: reported C repro on 2020/10/28 15:08
android-5-15 KASAN: out-of-bounds Read in ext4_xattr_set_entry (2) origin:lts 19 syz, C 191 11h56m 401d 0/2 upstream: reported C repro on 2025/07/03 01:48
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 6 2473d 2529d 0/1 auto-closed as invalid on 2020/02/28 13:35
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 1 2329d 2329d 0/1 auto-closed as invalid on 2020/07/21 03:20
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry (2) 19 syz, C done 7 1791d 2249d 1/1 fixed on 2021/10/13 07:23
upstream KASAN: out-of-bounds Read in ext4_xattr_set_entry prio:high ext4 22 syz, C error 7866 19h44m 685d 0/29 upstream: reported C repro on 2024/09/22 00:16
android-414 KASAN: use-after-free Read in ext4_xattr_set_entry 19 4 2780d 2673d 0/1 auto-closed as invalid on 2019/06/26 01:15
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (5) ext4 19 2 1475d 1533d 0/29 auto-obsoleted due to no activity on 2022/11/22 17:19
linux-5.15 KASAN: out-of-bounds Read in ext4_xattr_set_entry 19 syz, C error 65 14d 511d 0/3 upstream: reported C repro on 2025/03/15 11:50
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (3) ext4 19 4 2225d 2343d 0/29 auto-closed as invalid on 2020/11/02 08:32
linux-4.19 KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz done 10 2352d 2601d 1/1 fixed on 2020/03/30 09:03
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (4) ext4 22 syz, C error done 21 1629d 2016d 20/29 fixed on 2022/03/28 10:17
upstream KASAN: use-after-free Read in ext4_xattr_set_entry (2) ext4 19 syz, C done 19 2427d 2836d 15/29 fixed on 2020/02/14 01:19
android-54 KASAN: use-after-free Read in ext4_xattr_set_entry 19 6 2193d 2374d 0/2 auto-closed as invalid on 2020/12/04 21:44
linux-6.1 KASAN: out-of-bounds Read in ext4_xattr_set_entry missing-backport origin:lts-only 21 syz, C inconclusive 1058 15d 1177d 0/3 upstream: reported C repro on 2023/05/19 08:42
android-5-10 KASAN: out-of-bounds Read in ext4_xattr_set_entry 19 syz, C inconclusive 265 5d19h 1053d 0/2 upstream: reported C repro on 2023/09/20 02:40
linux-4.14 KASAN: use-after-free Read in ext4_xattr_set_entry 19 syz, C done 9 2381d 2473d 1/1 fixed on 2020/03/01 21:06
android-6-1 KASAN: out-of-bounds Read in ext4_xattr_set_entry origin:lts 21 syz, C 1013 2d14h 817d 0/2 upstream: reported C repro on 2024/05/13 18:18

Sample crash report:
==================================================================
BUG: KASAN: use-after-free in ext4_xattr_set_entry+0x2fc8/0x3dc0 fs/ext4/xattr.c:1598
Read of size 4 at addr ffff8801c6fa9184 by task syz-executor4/17442

CPU: 0 PID: 17442 Comm: syz-executor4 Not tainted 4.18.0-rc6-next-20180725+ #18
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1c9/0x2b4 lib/dump_stack.c:113
 ? dump_stac

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2018/07/27 18:00 linux-next d1e0b8e0cb7a 788351b1 .config console log report ci-upstream-linux-next-kasan-gce-root
* Struck through repros no longer work on HEAD.