syzbot


KASAN: use-after-free Read in remove_wait_queue
Status: fixed on 2018/02/26 20:04
Reported-by: syzbot+a2a3c4909716e271487e@syzkaller.appspotmail.com
Fix commit: 5eeb2ca0 ANDROID: binder: synchronize_rcu() when using POLLFREE.
First crash: 617d, last: 604d
duplicates (1):
Title Repro Bisected Count Last Reported Patched Status
KASAN: use-after-free Read in do_raw_spin_unlock (2) C 1 617d 614d 0/14 closed as dup on 2018/02/12 15:57
similar bugs (3):
Kernel Title Repro Bisected Count Last Reported Patched Status
upstream KASAN: use-after-free Read in remove_wait_queue (2) C 4 588d 598d 6/14 fixed on 2018/06/07 13:52
android-49 KASAN: use-after-free Read in remove_wait_queue C 6 605d 615d 2/3 fixed on 2018/03/05 12:02
linux-4.14 KASAN: use-after-free Read in remove_wait_queue 1 54d 54d 0/1 upstream: reported on 2019/08/26 16:10

Sample crash report:

Crashes (7):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro Maintainers
ci-upstream-kasan-gce 2018/02/22 04:09 upstream af3e79d2 04cbdbd1 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/02/09 15:14 upstream f1517df8 9fb5ec43 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/02/22 09:30 upstream af3e79d2 04cbdbd1 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/02/22 07:08 upstream af3e79d2 04cbdbd1 .config log report syz C linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce 2018/02/09 11:21 upstream f1517df8 9fb5ec43 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/02/16 23:47 upstream 1a2a7d3e c8b3f7c1 .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk
ci-upstream-kasan-gce-386 2018/02/11 19:49 upstream d48fcbd8 4e9b726d .config log report linux-fsdevel@vger.kernel.org, linux-kernel@vger.kernel.org, viro@zeniv.linux.org.uk