linux-kernel - Re: [syzbot] KASAN: use-after-free Read in udl_get_urb

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <87czcscvlf.wl-tiwai@suse.de>
Date:   Mon, 22 Aug 2022 14:26:52 +0200
From:   Takashi Iwai <tiwai@...e.de>
To:     syzbot <syzbot+f24934fe125a19d77eae@...kaller.appspotmail.com>
Cc:     airlied@...ux.ie, airlied@...hat.com, daniel@...ll.ch,
        dri-devel@...ts.freedesktop.org, linux-kernel@...r.kernel.org,
        sean@...rly.run, syzkaller-bugs@...glegroups.com, tiwai@...e.de,
        tzimmermann@...e.de
Subject: Re: [syzbot] KASAN: use-after-free Read in udl_get_urb_timeout

On Mon, 22 Aug 2022 11:09:31 +0200,
syzbot wrote:
> 
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    5b6a4bf680d6 Add linux-next specific files for 20220818
> git tree:       linux-next
> console+strace: https://syzkaller.appspot.com/x/log.txt?x=12341a3d080000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=ead6107a3bbe3c62
> dashboard link: https://syzkaller.appspot.com/bug?extid=f24934fe125a19d77eae
> compiler:       gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=12731867080000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=165b64f3080000
> 
> The issue was bisected to:
> 
> commit e25d5954264d1871ab2792c7ca2298b811462500
> Author: Takashi Iwai <tiwai@...e.de>
> Date:   Thu Aug 4 07:58:25 2022 +0000
> 
>     drm/udl: Kill pending URBs at suspend and disconnect

FYI, the fix including the revert of this commit was already
submitted, waiting for review & merge:
  https://lore.kernel.org/r/20220816153655.27526-1-tiwai@suse.de


thanks,

Takashi