syzbot


KASAN: use-after-free Read in tty_buffer_cancel_work
Status: fixed on 2020/04/04 09:58
Reported-by: syzbot+5d29cd6e8cbe275f1c98@syzkaller.appspotmail.com
Fix commit: b9eb60a0 vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
First crash: 316d, last: 228d

Fix bisection: fixed by (bisect log):

commit b9eb60a0ef3971101c94f9cddb09708c2f900b35
Author: Eric Biggers <ebiggers@google.com>
Date: Sun Mar 22 03:43:04 2020 +0000

  vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console

similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in tty_buffer_cancel_work 4 253d 301d 0/17 closed as dup on 2020/02/24 18:35

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Maintainers
ci2-linux-4-14 2019/12/07 23:26 linux-4.14.y a844dc4c 1508f453 .config log report syz C gregkh@linuxfoundation.org, jslaby@suse.com, linux-kernel@vger.kernel.org
ci2-linux-4-14 2020/01/05 06:11 linux-4.14.y 84f5ad46 68256974 .config log report gregkh@linuxfoundation.org, jslaby@suse.com, linux-kernel@vger.kernel.org