linux-kernel - Linux v5.5 serious PCI bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <PSXP216MB0438BFEAA0617283A834E11580580@PSXP216MB0438.KORP216.PROD.OUTLOOK.COM>
Date:   Mon, 9 Dec 2019 12:34:04 +0000
From:   Nicholas Johnson <nicholas.johnson-opensource@...look.com.au>
To:     Bjorn Helgaas <helgaas@...nel.org>
CC:     "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
        "linux-pci@...r.kernel.org" <linux-pci@...r.kernel.org>,
        "mika.westerberg@...ux.intel.com" <mika.westerberg@...ux.intel.com>
Subject: Linux v5.5 serious PCI bug

Hi,

I have compiled Linux v5.5-rc1 and thought all was good until I 
hot-removed a Gigabyte Aorus eGPU from Thunderbolt. The driver for the 
GPU was not loaded (blacklisted) so the crash is nothing to do with the 
GPU driver.

We had:
- kernel NULL pointer dereference
- refcount_t: underflow; use-after-free.

Attaching dmesg for now; will bisect and come back with results.

I am not sure why only this eGPU causes the issue - all my other devices 
do not trigger the bug.

I will shortly re-post my 4-patch series with some trivial alterations for v5.5.

Kind regards,
Nicholas

View attachment "dmesg-4" of type "text/plain" (189566 bytes)

View attachment "dmesg-5" of type "text/plain" (112193 bytes)