syzbot


KASAN: use-after-free Read in ntfs_iget (2)
Status: upstream: reported C repro on 2021/06/07 15:55
Reported-by: syzbot+213ac8bb98f7f4420840@syzkaller.appspotmail.com
Fix commit: d98e4d95411b ntfs: fix validity check for file name attribute
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-qemu2-riscv64 ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-arm32 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 60d, last: 60d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in ntfs_iget (log)
Repro: C syz .config
similar bugs (4):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in ntfs_iget C done 2 163d 239d 1/1 fixed on 2021/03/23 15:18
linux-4.19 KASAN: use-after-free Read in ntfs_iget C done 1 159d 219d 1/1 fixed on 2021/03/29 19:17
linux-4.19 KASAN: use-after-free Read in ntfs_iget (2) C done 1 42d 42d 1/1 fixed on 2021/07/22 23:24
upstream KASAN: use-after-free Read in ntfs_iget C error error 1 252d 248d 22/22 fixed on 2021/04/09 19:46
Patch testing requests:
Created Duration User Patch Repo Result
2021/06/14 04:30 19m desmondcheongzx@gmail.com patch upstream OK

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2021/06/04 04:13 linux-next a1f92694393a 0740de69 .config log report syz C KASAN: use-after-free Read in ntfs_iget
ci-upstream-linux-next-kasan-gce-root 2021/06/04 00:10 linux-next a1f92694393a 0740de69 .config log report info KASAN: use-after-free Read in ntfs_iget