linux-kernel - Re: [syzbot] KASAN: use-after-free Write in gadgetfs_kill

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Y5npl6gtsuf3+FKB@rowland.harvard.edu>
Date:   Wed, 14 Dec 2022 10:19:51 -0500
From:   Alan Stern <stern@...land.harvard.edu>
To:     syzbot <syzbot+33d7ad66d65044b93f16@...kaller.appspotmail.com>
Cc:     gregkh@...uxfoundation.org, hbh25y@...il.com,
        linux-kernel@...r.kernel.org, linux-usb@...r.kernel.org,
        mingo@...nel.org, rdunlap@...radead.org,
        syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] KASAN: use-after-free Write in gadgetfs_kill_sb

On Tue, Dec 13, 2022 at 06:37:17PM -0800, syzbot wrote:
> Hello,
> 
> syzbot has tested the proposed patch and the reproducer did not trigger any issue:
> 
> Reported-and-tested-by: syzbot+33d7ad66d65044b93f16@...kaller.appspotmail.com

I'll take this as an indication that the previously reported RCU stall 
was caused by something unrelated to the patch.  The patch will get 
submitted in the next few days.

Alan Stern

> 
> Tested on:
> 
> commit:         830b3c68 Linux 6.1
> git tree:       https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
> console output: https://syzkaller.appspot.com/x/log.txt?x=10f5988b880000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=5a194ed4fc682723
> dashboard link: https://syzkaller.appspot.com/bug?extid=33d7ad66d65044b93f16
> compiler:       Debian clang version 13.0.1-++20220126092033+75e33f71c2da-1~exp1~20220126212112.63, GNU ld (GNU Binutils for Debian) 2.35.2
> patch:          https://syzkaller.appspot.com/x/patch.diff?x=12208bc0480000
> 
> Note: testing is done by a robot and is best-effort only.