syzbot


KASAN: slab-out-of-bounds Read in bpf_skb_change_proto
Status: fixed on 2020/02/05 13:33
Reported-by: syzbot+d8532c325bf5c40a1b85@syzkaller.appspotmail.com
Fix commit: 7fed98f4 bpf: reject passing modified ctx to helper functions
First crash: 289d, last: 142d

Fix bisection: fixed by (bisect log):

commit 7fed98f4a1e6eb77a5d66ecfdf9345e21df6ac82
Author: Daniel Borkmann <daniel@iogearbox.net>
Date: Thu Jun 7 15:40:03 2018 +0000

  bpf: reject passing modified ctx to helper functions

similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Read in bpf_skb_change_proto C 2 714d 714d 9/17 fixed on 2018/07/09 18:05
android-414 KASAN: slab-out-of-bounds Read in bpf_skb_change_proto C 11 188d 409d 0/1 public: reported C repro on 2019/04/12 00:01

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-14 2019/09/02 11:20 linux-4.14.y 01fd1694 db7c31ca .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci2-linux-4-14 2019/08/09 21:41 linux-4.14.y 3ffe1e79 aff9e255 .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org