linux-kernel - Re: KASAN: use-after-free Read in uprobe_perf

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <000000000000ef265b0596c1d48c@google.com>
Date:   Thu, 07 Nov 2019 05:42:08 -0800
From:   syzbot <syzbot+cef9473c7fa0fe8ab95e@...kaller.appspotmail.com>
To:     acme@...nel.org, alexander.shishkin@...ux.intel.com,
        bhole_prashant_q7@....ntt.co.jp, jolsa@...hat.com,
        linux-kernel@...r.kernel.org, mingo@...nel.org, mingo@...hat.com,
        namhyung@...nel.org, oleg@...hat.com, peterz@...radead.org,
        rostedt@...dmis.org, stable@...nel.org,
        syzkaller-bugs@...glegroups.com, tglx@...utronix.de,
        torvalds@...ux-foundation.org
Subject: Re: KASAN: use-after-free Read in uprobe_perf_close

syzbot suspects this bug was fixed by commit:

commit 621b6d2ea297d0fb6030452c5bcd221f12165fcf
Author: Prashant Bhole <bhole_prashant_q7@....ntt.co.jp>
Date:   Mon Apr 9 10:03:46 2018 +0000

     perf/core: Fix use-after-free in uprobe_perf_close()

bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=1068a38c600000
start commit:   86bbbeba Merge branch 'ras-core-for-linus' of git://git.ke..
git tree:       upstream
kernel config:  https://syzkaller.appspot.com/x/.config?x=5e630e8cb6d3da36
dashboard link: https://syzkaller.appspot.com/bug?extid=cef9473c7fa0fe8ab95e
syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=162240bb800000
C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=17a4e0bb800000

If the result looks correct, please mark the bug fixed by replying with:

#syz fix: perf/core: Fix use-after-free in uprobe_perf_close()

For information about bisection process see: https://goo.gl/tpsmEJ#bisection