syzbot


KASAN: use-after-free Read in sco_chan_del
Status: fixed on 2021/01/06 10:07
Reported-by: syzbot+1c98095bbb6f3a9d7cc7@syzkaller.appspotmail.com
Fix commit: 4113f6f73f6e Bluetooth: Fix null pointer dereference in hci_event_packet()
First crash: 413d, last: 288d

Fix bisection: fixed by (bisect log) :
commit 4113f6f73f6e8d215609bde8c0c14ca9f8a476c5
Author: Anmol Karn <anmol.karan123@gmail.com>
Date: Wed Sep 30 14:18:13 2020 +0000

  Bluetooth: Fix null pointer dereference in hci_event_packet()

similar bugs (1):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KASAN: use-after-free Read in sco_chan_del 1 348d 344d 0/22 auto-closed as invalid on 2020/12/18 15:57

Sample crash report:

Crashes (10):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci2-linux-4-14 2020/08/08 08:36 linux-4.14.y 14b58326976d ff51e522 .config log report syz C
ci2-linux-4-14 2020/08/08 07:05 linux-4.14.y 14b58326976d ff51e522 .config log report syz C
ci2-linux-4-14 2020/08/07 13:12 linux-4.14.y 14b58326976d 28ac5c9e .config log report syz C
ci2-linux-4-14 2020/08/07 12:42 linux-4.14.y 14b58326976d 28ac5c9e .config log report syz C
ci2-linux-4-14 2020/08/06 18:02 linux-4.14.y ca4f2c56d416 4ca1c0ea .config log report syz C
ci2-linux-4-14 2020/08/06 16:58 linux-4.14.y ca4f2c56d416 4ca1c0ea .config log report syz C
ci2-linux-4-14 2020/08/06 03:41 linux-4.14.y ca4f2c56d416 0487ea6f .config log report syz C
ci2-linux-4-14 2020/08/05 19:33 linux-4.14.y ca4f2c56d416 b7129355 .config log report syz C
ci2-linux-4-14 2020/08/05 17:32 linux-4.14.y ca4f2c56d416 b7129355 .config log report syz C
ci2-linux-4-14 2020/08/03 13:09 linux-4.14.y 7f2c5eb458b8 96dd3623 .config log report syz C