syzbot


KASAN: use-after-free Read in __isofs_iget
Status: upstream: reported C repro on 2021/10/16 00:35
Reported-by: syzbot+6fc7fb214625d82af7d1@syzkaller.appspotmail.com
Fix commit: e96a1866b405 isofs: Fix out of bound access for corrupted isofs image
Patched on: [ci-qemu-upstream ci-qemu-upstream-386 ci-qemu2-arm32 ci-qemu2-arm64 ci-qemu2-arm64-compat ci-qemu2-arm64-mte ci-upstream-bpf-kasan-gce ci-upstream-bpf-next-kasan-gce ci-upstream-gce-leak ci-upstream-kasan-gce ci-upstream-kasan-gce-386 ci-upstream-kasan-gce-root ci-upstream-kasan-gce-selinux-root ci-upstream-kasan-gce-smack-root ci-upstream-linux-next-kasan-gce-root ci-upstream-net-kasan-gce ci-upstream-net-this-kasan-gce ci2-upstream-kcsan-gce ci2-upstream-usb], missing on: [ci-qemu2-riscv64 ci-upstream-kmsan-gce ci-upstream-kmsan-gce-386]
First crash: 50d, last: 50d

Cause bisection: the issue happens on the oldest tested release (bisect log)
Crash: KASAN: use-after-free Read in __isofs_iget (log)
Repro: C syz .config
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.14 KASAN: use-after-free Read in __isofs_iget C 1 15d 135d 0/1 upstream: reported C repro on 2021/07/18 17:43
linux-4.19 KASAN: use-after-free Read in __isofs_iget C error 1 47d 167d 0/1 upstream: reported C repro on 2021/06/17 11:39
Patch testing requests:
Created Duration User Patch Repo Result
2021/10/19 09:16 18m jack@suse.cz patch git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git 519d81956ee277b4419c723adfb154603c2565ba OK

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2021/10/12 00:51 linux-next d3134eb5de85 838e7e2c .config log report syz C KASAN: use-after-free Read in __isofs_iget
ci-upstream-linux-next-kasan-gce-root 2021/10/12 00:32 linux-next d3134eb5de85 838e7e2c .config log report info KASAN: use-after-free Read in __isofs_iget