syzbot


KASAN: use-after-free Read in snd_seq_ioctl_get_subscription
Status: upstream: reported on 2018/10/01 07:28
Reported-by: syzbot+9437020c82413d00222d@syzkaller.appspotmail.com
Fix commit: ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-usb]
First crash: 207d, last: 173d

Sample crash report:

All crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-386 2018/09/29 10:41 upstream e704966c 41e4b329 .config log report alsa-devel@alsa-project.org, gregkh@linuxfoundation.org, keescook@chromium.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/11/02 13:08 upstream e468f5c0 1f38e9ae .config log report alsa-devel@alsa-project.org, gregkh@linuxfoundation.org, keescook@chromium.org, linux-kernel@vger.kernel.org, perex@perex.cz, tiwai@suse.com, viro@zeniv.linux.org.uk