syzbot


KASAN: use-after-free Read in pneigh_get_next
Status: fixed on 2019/07/10 21:40
Reported-by: syzbot+@syzkaller.appspotmail.com
Fix commit: f3e92cb8 neigh: fix use-after-free read in pneigh_get_next
First crash: 216d, last: 216d

Cause bisection: introduced by (bisect log):

commit 95eb940c0ec5f232f4ba033c121cabd5f9f379ee
Author: Olof Johansson <olof@lixom.net>
Date: Mon Jun 13 21:51:58 2016 +0000

  Merge tag 'samsung-dt-odroid-xu-4.8' of git://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux into next/dt

Crash: KASAN: use-after-free Read in pneigh_get_next (log)
Repro: syz .config
similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-49 KASAN: use-after-free Read in pneigh_get_next syz 9 183d 217d 0/3 public: reported syz repro on 2019/06/14 20:21
linux-4.19 KASAN: use-after-free Read in pneigh_get_next syz fix 1 216d 216d 1/1 fixed on 2019/12/16 09:09

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce-smack-root 2019/06/15 17:20 upstream 0011572c 442206d7 .config log report syz christian@brauner.io, davem@davemloft.net, dsahern@gmail.com, khlebnikov@yandex-team.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, roopa@cumulusnetworks.com
ci-upstream-kasan-gce-selinux-root 2019/06/15 17:11 upstream 0011572c 442206d7 .config log report syz christian@brauner.io, davem@davemloft.net, dsahern@gmail.com, khlebnikov@yandex-team.ru, linux-kernel@vger.kernel.org, netdev@vger.kernel.org, roopa@cumulusnetworks.com