linux-kernel - RE: BUG: stack guard page was hit in vsock_connectible

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID:
 <SA1PR21MB1317D76CCC5F69C56F230423BFB32@SA1PR21MB1317.namprd21.prod.outlook.com>
Date: Fri, 2 Aug 2024 22:23:40 +0000
From: Dexuan Cui <decui@...rosoft.com>
To: Ubisectech Sirius <bugreport@...iantsec.com>, linux-kernel
	<linux-kernel@...r.kernel.org>
CC: KY Srinivasan <kys@...rosoft.com>, Haiyang Zhang <haiyangz@...rosoft.com>,
	wei.liu <wei.liu@...nel.org>
Subject: RE: BUG: stack guard page was hit in vsock_connectible_recvmsg

> From: Ubisectech Sirius <bugreport@...iantsec.com>
> Sent: Sunday, July 28, 2024 7:23 PM
> [...]
> Hello.
> We are Ubisectech Sirius Team, the vulnerability lab of China ValiantSec.
> Recently, our team has discovered a issue in Linux kernel 6.8. Attached to
> the email were a PoC file of the issue.

I had a look at the poc.c, which I think basically runs a test in a loop:
    Create a new child process;
    In the same process,  do:
        Start a vsock server via socket(), bind(), and listen();
        Create a vsock connection to the server via connect();
        The vsock server calls accept();
        The sever and the client exchanges some data via writev(), recvmsg() and bpf().

I believe this test doesn't apply to Hyper-V Sockets, which doesn't support
creating a vsock connection inside the VM, and only allows creating a vsock 
connection between the Windows host and the VM.

I suppose this is related to VMWare vsock or KVM vsock.

As Wei pointed out, please Cc the related people/lists.

Thanks,
Dexuan