linux-kernel - Re: [syzbot] KASAN: use-after-free Read in disk_part_iter

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <954345c8-6010-71b5-a723-192cd1556d6d@acm.org>
Date:   Sun, 21 Mar 2021 21:15:56 -0700
From:   Bart Van Assche <bvanassche@....org>
To:     Ming Lei <tom.leiming@...il.com>
Cc:     syzbot <syzbot+8fede7e30c7cee0de139@...kaller.appspotmail.com>,
        Jens Axboe <axboe@...nel.dk>,
        linux-block <linux-block@...r.kernel.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        syzkaller-bugs@...glegroups.com, Hillf Danton <hdanton@...a.com>
Subject: Re: [syzbot] KASAN: use-after-free Read in disk_part_iter_next (2)

On 3/21/21 7:35 PM, Ming Lei wrote:
> On Mon, Mar 22, 2021 at 7:03 AM Bart Van Assche <bvanassche@....org> wrote:
>>
>> On 3/14/21 4:08 AM, syzbot wrote:
>>> syzbot found the following issue on:
>>>
>>> HEAD commit:    280d542f Merge tag 'drm-fixes-2021-03-05' of git://anongit..
>>> git tree:       upstream
>>> console output: https://syzkaller.appspot.com/x/log.txt?x=15ade5aed00000
>>> kernel config:  https://syzkaller.appspot.com/x/.config?x=952047a9dbff6a6a
>>> dashboard link: https://syzkaller.appspot.com/bug?extid=8fede7e30c7cee0de139
>>
>> #syz test: https://github.com/bvanassche/linux a5f35387ebdc
> 
> It should be the same issue which was addressed by
> 
>    aebf5db91705 block: fix use-after-free in disk_part_iter_next
> 
> but converting to xarray introduced the issue again.

Hi Ming,

Since that patch does not re-apply cleanly, do you want to convert that
patch to the latest kernel version or do you perhaps expect me to do that?

Thanks,

Bart.