linux-kernel - Re: KASAN: use-after-free Read in rt_cache

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <000000000000f8e14f0584c96446@google.com>
Date:   Sat, 23 Mar 2019 14:10:00 -0700
From:   syzbot <syzbot+c4c4b2bb358bb936ad7e@...kaller.appspotmail.com>
To:     alexandre.torgue@...com, alsa-devel@...a-project.org,
        arnaud.pouliquen@...com, broonie@...nel.org,
        colin.king@...onical.com, davem@...emloft.net, dsahern@...il.com,
        ktkhai@...tuozzo.com, kuznet@....inr.ac.ru, lgirdwood@...il.com,
        linux-arm-kernel@...ts.infradead.org, linux-kernel@...r.kernel.org,
        linux-stm32@...md-mailman.stormreply.com,
        mcoquelin.stm32@...il.com, netdev@...r.kernel.org,
        olivier.moysan@...com, perex@...ex.cz,
        syzkaller-bugs@...glegroups.com, tiwai@...e.com,
        tyhicks@...onical.com, willy@...radead.org, yoshfuji@...ux-ipv6.org
Subject: Re: KASAN: use-after-free Read in rt_cache_valid

syzbot has bisected this bug to:

commit 6b27e27729270a2478fdebea2db9c4f57bb4e8e6
Author: Colin Ian King <colin.king@...onical.com>
Date:   Wed Oct 31 19:31:43 2018 +0000

     ASoC: stm32: sai: fix less than zero comparison on unsigned int

bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=10c0298b200000
start commit:   aa0c38cf Merge branch 'fixes' of git://git.kernel.org/pub/..
git tree:       upstream
final crash:    https://syzkaller.appspot.com/x/report.txt?x=12c0298b200000
console output: https://syzkaller.appspot.com/x/log.txt?x=14c0298b200000
kernel config:  https://syzkaller.appspot.com/x/.config?x=ee434566c893c7b1
dashboard link: https://syzkaller.appspot.com/bug?extid=c4c4b2bb358bb936ad7e
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1197cb88c00000

Reported-by: syzbot+c4c4b2bb358bb936ad7e@...kaller.appspotmail.com
Fixes: 6b27e2772927 ("ASoC: stm32: sai: fix less than zero comparison on  
unsigned int")

For information about bisection process see: https://goo.gl/tpsmEJ#bisection