linux-kernel - Re: KASAN: use-after-free Write in skb_release

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 25 Mar 2019 01:19:01 -0700
From:   syzbot <syzbot+580be3953ed99133804f@...kaller.appspotmail.com>
To:     alexander.h.duyck@...el.com, ast@...nel.org, bpf@...r.kernel.org,
        daniel@...earbox.net, davem@...emloft.net, dvyukov@...gle.com,
        edumazet@...gle.com, kafai@...com, kuznet@....inr.ac.ru,
        linux-kernel@...r.kernel.org, lirongqing@...du.com,
        magnus.karlsson@...el.com, maximmi@...lanox.com,
        netdev@...r.kernel.org, pabeni@...hat.com, soheil@...gle.com,
        songliubraving@...com, syzkaller-bugs@...glegroups.com,
        vincent.whitchurch@...s.com, willemb@...gle.com, yhs@...com,
        yoshfuji@...ux-ipv6.org
Subject: Re: KASAN: use-after-free Write in skb_release_data (2)

syzbot has bisected this bug to:

commit 472c2e07eef045145bc1493cc94a01c87140780a
Author: Eric Dumazet <edumazet@...gle.com>
Date:   Fri Mar 22 15:56:39 2019 +0000

     tcp: add one skb cache for tx

bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=17abf52b200000
start commit:   68cc2999 Merge branch 'devlink-small-spring-cleanup'
git tree:       net-next
final crash:    https://syzkaller.appspot.com/x/report.txt?x=146bf52b200000
console output: https://syzkaller.appspot.com/x/log.txt?x=106bf52b200000
kernel config:  https://syzkaller.appspot.com/x/.config?x=9ab5bbbbf283c99a
dashboard link: https://syzkaller.appspot.com/bug?extid=580be3953ed99133804f
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=123a3d3b200000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=11d34f93200000

Reported-by: syzbot+580be3953ed99133804f@...kaller.appspotmail.com
Fixes: 472c2e07eef0 ("tcp: add one skb cache for tx")

For information about bisection process see: https://goo.gl/tpsmEJ#bisection