syzbot


KASAN: slab-out-of-bounds Read in bpf_skb_change_tail
Status: fixed on 2020/02/05 13:33
Reported-by: syzbot+75bc540c9480645ad6f1@syzkaller.appspotmail.com
Fix commit: 7fed98f4 bpf: reject passing modified ctx to helper functions
First crash: 288d, last: 142d

Fix bisection: fixed by (bisect log):

commit 7fed98f4a1e6eb77a5d66ecfdf9345e21df6ac82
Author: Daniel Borkmann <daniel@iogearbox.net>
Date: Thu Jun 7 15:40:03 2018 +0000

  bpf: reject passing modified ctx to helper functions

similar bugs (1):
Kernel Title Repro Bisected Count Last Reported Patched Status
android-414 KASAN: slab-out-of-bounds Read in bpf_skb_change_tail syz 1 552d 407d 0/1 public: reported syz repro on 2019/04/13 00:01

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-14 2019/08/15 15:09 linux-4.14.y 3ffe1e79 0d298d6b .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci2-linux-4-14 2019/08/10 11:08 linux-4.14.y 3ffe1e79 acb51638 .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org