linux-kernel - Re: [syzbot] Monthly integrity report (Dec 2024)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <5401699f8b00ea09367353dc075b5c569ca68d9b.camel@huaweicloud.com>
Date: Wed, 11 Dec 2024 09:54:37 +0100
From: Roberto Sassu <roberto.sassu@...weicloud.com>
To: syzbot <syzbot+list2eccd137a466e6acfa54@...kaller.appspotmail.com>, 
 linux-integrity@...r.kernel.org, linux-kernel@...r.kernel.org, 
 syzkaller-bugs@...glegroups.com, "Yuezhang.Mo@...y.com"
 <Yuezhang.Mo@...y.com>
Subject: Re: [syzbot] Monthly integrity report (Dec 2024)

On Sat, 2024-12-07 at 08:13 -0800, syzbot wrote:
> Hello integrity maintainers/developers,
> 
> This is a 31-day syzbot report for the integrity subsystem.
> All related reports/information can be found at:
> https://syzkaller.appspot.com/upstream/s/integrity
> 
> During the period, 0 new issues were detected and 0 were fixed.
> In total, 3 issues are still open and 8 have already been fixed.
> 
> Some of the still happening issues:
> 
> Ref Crashes Repro Title
> <1> 433     No    INFO: task hung in process_measurement (2)
>                   https://syzkaller.appspot.com/bug?extid=1de5a37cb85a2d536330
> <2> 32      Yes   KMSAN: uninit-value in ima_add_template_entry (2)
>                   https://syzkaller.appspot.com/bug?extid=91ae49e1c1a2634d20c0

Hi Yuezhang

it seems that the patch causing the report above is:

6630ea49103c exfat: move extend valid_size into ->page_mkwrite()

Currently, didn't develop a fix for it. Could you please have a look?

Thanks

Roberto

> <3> 2       Yes   INFO: task hung in ima_file_free (4)
>                   https://syzkaller.appspot.com/bug?extid=8036326eebe7d0140944
> 
> ---
> This report is generated by a bot. It may contain errors.
> See https://goo.gl/tpsmEJ for more information about syzbot.
> syzbot engineers can be reached at syzkaller@...glegroups.com.
> 
> To disable reminders for individual bugs, reply with the following command:
> #syz set <Ref> no-reminders
> 
> To change bug's subsystems, reply with:
> #syz set <Ref> subsystems: new-subsystem
> 
> You may send multiple commands in a single email message.