syzbot


KASAN: slab-out-of-bounds Read in bpf_skb_change_head
Status: fixed on 2020/01/25 22:00
Reported-by: syzbot+f0da52642af6658df2de@syzkaller.appspotmail.com
Fix commit: 7fed98f4 bpf: reject passing modified ctx to helper functions
First crash: 261d, last: 192d

Fix bisection: fixed by (bisect log):

commit 7fed98f4a1e6eb77a5d66ecfdf9345e21df6ac82
Author: Daniel Borkmann <daniel@iogearbox.net>
Date: Thu Jun 7 15:40:03 2018 +0000

  bpf: reject passing modified ctx to helper functions

similar bugs (2):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: slab-out-of-bounds Read in bpf_skb_change_head C 2 751d 751d 9/17 fixed on 2018/07/09 18:05
android-414 KASAN: slab-out-of-bounds Read in bpf_skb_change_head C 8 238d 449d 0/1 public: reported C repro on 2019/04/12 00:01

Sample crash report:

Crashes (2):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci2-linux-4-14 2019/11/25 04:55 linux-4.14.y 43598c57 598ca6c8 .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org
ci2-linux-4-14 2019/10/17 01:23 linux-4.14.y e132c8d7 8c88c9c1 .config log report syz C ast@kernel.org, daniel@iogearbox.net, davem@davemloft.net, linux-kernel@vger.kernel.org, netdev@vger.kernel.org