linux-kernel - Forwarded: Test patch for KMSAN: uninit-value in sctp_inq

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <68f8a1e7.050a0220.346f24.003c.GAE@google.com>
Date: Wed, 22 Oct 2025 02:20:39 -0700
From: syzbot <syzbot+d101e12bccd4095460e7@...kaller.appspotmail.com>
To: linux-kernel@...r.kernel.org
Subject: Forwarded: Test patch for KMSAN: uninit-value in sctp_inq_pop

For archival purposes, forwarding an incoming command email to
linux-kernel@...r.kernel.org.

***

Subject: Test patch for KMSAN: uninit-value in sctp_inq_pop
Author: vnranganath.20@...il.com

#syz test

diff --git a/net/sctp/inqueue.c b/net/sctp/inqueue.c
index 5c1652181805..8c0a5e23bbb9 100644
--- a/net/sctp/inqueue.c
+++ b/net/sctp/inqueue.c
@@ -120,7 +120,9 @@ struct sctp_chunk *sctp_inq_pop(struct sctp_inq *queue)
  /* The assumption is that we are safe to process the chunks
  * at this time.
  */
-
+ chunk = kzalloc(sizeof(*chunk), gfp);
+ if (!chunk)
+ return NULL;
  chunk = queue->in_progress;
  if (chunk) {
  /* There is a packet that we have been working on.