linux-kernel - Re: [syzbot] KASAN: use-after-free Read in nfc_llcp_sock

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAKErNvpTgH+=fcoNy=D31Ky2USJSfd5tNXpTGn7wCPYt-5Hfig@mail.gmail.com>
Date:   Mon, 7 Jun 2021 21:06:32 +0300
From:   Maxim Mikityanskiy <maxtram95@...il.com>
To:     syzbot <syzbot+8b7c5fc0cfb74afee8d1@...kaller.appspotmail.com>
Cc:     akpm@...ux-foundation.org,
        Benjamin Tissoires <benjamin.tissoires@...hat.com>,
        bp@...en8.de, "David S. Miller" <davem@...emloft.net>,
        hpa@...or.com, Jiri Kosina <jikos@...nel.org>, jkosina@...e.cz,
        jmattson@...gle.com, joro@...tes.org, kuba@...nel.org,
        kvm@...r.kernel.org, linux-input@...r.kernel.org,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        mark.rutland@....com, masahiroy@...nel.org, mingo@...hat.com,
        netdev@...r.kernel.org, pbonzini@...hat.com, peterz@...radead.org,
        rafael.j.wysocki@...el.com, rostedt@...dmis.org, seanjc@...gle.com,
        syzkaller-bugs@...glegroups.com, tglx@...utronix.de,
        tseewald@...il.com, vkuznets@...hat.com, wanpengli@...cent.com,
        will@...nel.org, x86@...nel.org
Subject: Re: [syzbot] KASAN: use-after-free Read in nfc_llcp_sock_unlink

On Mon, Jun 7, 2021 at 2:27 AM syzbot
<syzbot+8b7c5fc0cfb74afee8d1@...kaller.appspotmail.com> wrote:
>
> syzbot suspects this issue was fixed by commit:
>
> commit f567d6ef8606fb427636e824c867229ecb5aefab
> Author: Maxim Mikityanskiy <maxtram95@...il.com>
> Date:   Sun Feb 7 14:47:40 2021 +0000
>
>     HID: plantronics: Workaround for double volume key presses

Dear syzbot,

I highly doubt my commit could fix any use-after-free bug in NFC. It's
not related to NFC, and it's not a bugfix. Probably the repro isn't
100% stable, so the bisect results are invalid.

> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=14e41588300000
> start commit:   bbd6f0a9 bnxt_en: Fix RX consumer index logic in the error..
> git tree:       net
> kernel config:  https://syzkaller.appspot.com/x/.config?x=339c2ecce8fdd1d0
> dashboard link: https://syzkaller.appspot.com/bug?extid=8b7c5fc0cfb74afee8d1
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=1712a893d00000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=1298b469d00000
>
> If the result looks correct, please mark the issue as fixed by replying with:
>
> #syz fix: HID: plantronics: Workaround for double volume key presses
>
> For information about bisection process see: https://goo.gl/tpsmEJ#bisection