syzbot


KASAN: use-after-free Read in pneigh_get_next
Status: fixed on 2019/12/16 09:09
Reported-by: syzbot+2ee344c4db7923647627@syzkaller.appspotmail.com
Fix commit: 103835df neigh: fix use-after-free read in pneigh_get_next
First crash: 218d, last: 218d

Fix bisection: fixed by (bisect log):

commit 103835df6821a57edf1ec5e0b33b379fa37dd35f
Author: Eric Dumazet <edumazet@google.com>
Date: Sat Jun 15 23:28:48 2019 +0000

  neigh: fix use-after-free read in pneigh_get_next

similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-49 KASAN: use-after-free Read in pneigh_get_next syz 9 185d 219d 0/3 public: reported syz repro on 2019/06/14 20:21
upstream KASAN: use-after-free Read in pneigh_get_next syz cause 2 218d 218d 13/16 fixed on 2019/07/10 21:40

Sample crash report:

Crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-19 2019/06/15 17:18 linux-4.19.y 7aa823a9 442206d7 .config log report syz davem@davemloft.net, dsahern@gmail.com, gregkh@linuxfoundation.org, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, roopa@cumulusnetworks.com, stephen@networkplumber.org, vasilykh@arista.com