syzbot


KASAN: use-after-free Read in cpia2_usb_disconnect
Status: upstream: reported syz repro on 2019/04/16 11:16
Reported-by: syzbot+0c90fc937c84f97d0aa6@syzkaller.appspotmail.com
Fix commit: media: cpia2_usb: first wake up, then free in disconnect
Patched on: [ci-upstream-linux-next-kasan-gce-root], missing on: [ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-kmsan-gce ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-usb]
First crash: 64d, last: 64d

Sample crash report:

All crashes (1):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-upstream-usb 2019/04/16 07:31 https://github.com/google/kasan.git usb-fuzzer 9a33b369 505ab413 .config log report syz hverkuil-cisco@xs4all.nl, keescook@chromium.org, linux-kernel@vger.kernel.org, linux-media@vger.kernel.org, mchehab@kernel.org, sakari.ailus@linux.intel.com