syzbot


KASAN: use-after-free Read in seccomp_notify_release (2)
Status: fixed on 2019/05/27 12:48
Reported-by: syzbot+b562969adb2e04af3442@syzkaller.appspotmail.com
Fix commit: 7a0df7fb seccomp: Make NEW_LISTENER and TSYNC flags exclusive
First crash: 94d, last: 93d

Bisection: introduced by (bisect log):

commit a799aea0988ea0d1b1f263e996fdad2f6133c680
Author: wenxu <wenxu@ucloud.cn>
Date: Wed Jan 9 02:40:11 2019 +0000

  netfilter: nft_flow_offload: Fix reverse route lookup

Tree: upstream
Crash: KASAN: use-after-free Read in seccomp_notify_release (log)
Repro: C syz .config
similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in seccomp_notify_release C 27 117d 166d 12/13 fixed on 2019/03/06 07:43

Sample crash report:

All crashes (9):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-selinux-root 2019/03/24 19:50 upstream 1bdd3dbf acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-kasan-gce-root 2019/03/24 21:02 upstream 1bdd3dbf acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-kasan-gce 2019/03/24 20:58 upstream 1bdd3dbf acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-kasan-gce-smack-root 2019/03/24 20:56 upstream 1bdd3dbf acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-kasan-gce-386 2019/03/24 21:05 upstream 1bdd3dbf acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-linux-next-kasan-gce-root 2019/03/24 20:55 linux-next e382d91f acbc5b7d .config log report syz C ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-kasan-gce-selinux-root 2019/03/24 19:32 upstream 1bdd3dbf acbc5b7d .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-linux-next-kasan-gce-root 2019/03/25 20:44 linux-next e382d91f 2c86e0a5 .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com
ci-upstream-linux-next-kasan-gce-root 2019/03/25 04:38 linux-next e382d91f 2c86e0a5 .config log report ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, kafai@fb.com, keescook@chromium.org, linux-kernel@vger.kernel.org, luto@amacapital.net, netdev@vger.kernel.org, songliubraving@fb.com, wad@chromium.org, yhs@fb.com