linux-kernel - Re: [syzbot] general protection fault in kcm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 7 Jun 2021 20:45:42 +0300
From:   Pavel Skripkin <paskripkin@...il.com>
To:     syzbot <syzbot+65badd5e74ec62cb67dc@...kaller.appspotmail.com>
Cc:     andrii@...nel.org, ast@...nel.org, bpf@...r.kernel.org,
        coreteam@...filter.org, daniel@...earbox.net, davem@...emloft.net,
        dsahern@...nel.org, fw@...len.de, john.fastabend@...il.com,
        jonathan.lemon@...il.com, kadlec@...filter.org, kafai@...com,
        kpsingh@...nel.org, kuba@...nel.org, linux-kernel@...r.kernel.org,
        matthieu.baerts@...sares.net, netdev@...r.kernel.org,
        netfilter-devel@...r.kernel.org, pablo@...filter.org,
        songliubraving@...com, syzkaller-bugs@...glegroups.com,
        unixbhaskar@...il.com, yhs@...com, yoshfuji@...ux-ipv6.org,
        zhengyongjun3@...wei.com
Subject: Re: [syzbot] general protection fault in kcm_sendmsg

On Mon, 07 Jun 2021 08:46:26 -0700
syzbot <syzbot+65badd5e74ec62cb67dc@...kaller.appspotmail.com> wrote:

> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    1a802423 virtio-net: fix for skb_over_panic inside
> big mode git tree:       bpf
> console output:
> https://syzkaller.appspot.com/x/log.txt?x=159b08afd00000 kernel
> config:  https://syzkaller.appspot.com/x/.config?x=770708ea7cfd4916
> dashboard link:
> https://syzkaller.appspot.com/bug?extid=65badd5e74ec62cb67dc syz
> repro:
> https://syzkaller.appspot.com/x/repro.syz?x=104624afd00000 C
> reproducer:   https://syzkaller.appspot.com/x/repro.c?x=16e36197d00000
> 
> The issue was bisected to:
> 
> commit f9006acc8dfe59e25aa75729728ac57a8d84fc32
> Author: Florian Westphal <fw@...len.de>
> Date:   Wed Apr 21 07:51:08 2021 +0000
> 
>     netfilter: arp_tables: pass table pointer via nf_hook_ops
> 

It's c47cc304990a ("net: kcm: fix memory leak in kcm_sendmsg") where
the bug was introduced by me :(

I've already sent a revert




With regards,
Pavel Skripkin