linux-kernel - Re: [syzbot] [audit?] general protection fault in smack_log

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAHC9VhRpDPTopxgOEbDt1d_XyDVNzaA7++6UojWXidbpBHjeVA@mail.gmail.com>
Date: Thu, 19 Sep 2024 12:05:29 -0400
From: Paul Moore <paul@...l-moore.com>
To: syzbot <syzbot+044fdf24e96093584232@...kaller.appspotmail.com>
Cc: audit@...r.kernel.org, casey@...aufler-ca.com, eparis@...hat.com, 
	jmorris@...ei.org, john.johansen@...onical.com, linux-kernel@...r.kernel.org, 
	linux-security-module@...r.kernel.org, serge@...lyn.com, 
	syzkaller-bugs@...glegroups.com
Subject: Re: [syzbot] [audit?] general protection fault in smack_log_callback

On Thu, Sep 19, 2024 at 9:23 AM syzbot
<syzbot+044fdf24e96093584232@...kaller.appspotmail.com> wrote:
>
> Hello,
>
> syzbot found the following issue on:
>
> HEAD commit:    bdf56c7580d2 Merge tag 'slab-for-6.12' of git://git.kernel..
> git tree:       upstream
> console output: https://syzkaller.appspot.com/x/log.txt?x=12584b00580000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=4540f5bcdd31e3de
> dashboard link: https://syzkaller.appspot.com/bug?extid=044fdf24e96093584232
> compiler:       Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=155cffc7980000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=16ad24a9980000
>
> Downloadable assets:
> disk image: https://storage.googleapis.com/syzbot-assets/cec9f3c675f1/disk-bdf56c75.raw.xz
> vmlinux: https://storage.googleapis.com/syzbot-assets/21e06ae5b159/vmlinux-bdf56c75.xz
> kernel image: https://storage.googleapis.com/syzbot-assets/1e936c954b8b/bzImage-bdf56c75.xz
>
> The issue was bisected to:
>
> commit 5f8d28f6d7d568dbbc8c5bce94894474c07afd4f
> Author: Casey Schaufler <casey@...aufler-ca.com>
> Date:   Wed Jul 10 21:32:26 2024 +0000
>
>     lsm: infrastructure management of the key security blob
>
> bisection log:  https://syzkaller.appspot.com/x/bisect.txt?x=1124d69f980000
> final oops:     https://syzkaller.appspot.com/x/report.txt?x=1324d69f980000
> console output: https://syzkaller.appspot.com/x/log.txt?x=1524d69f980000

I just posted a patch which I believe should fix the problem, but I'd
like to get Casey's ACK on it before submitting upstream as it does
touch Smack code; lore link below:

https://lore.kernel.org/linux-security-module/20240919155740.29539-2-paul@paul-moore.com

... in the meantime, I'm attaching the patch here so syzbot can verify
that it solves the problem.

#syz test

-- 
paul-moore.com

View attachment "01-lsm-key_blob_fix.patch" of type "text/x-patch" (2406 bytes)