netdev - Re: Kernel panic on shutdown (qede+bond+bridge) - KASAN: use-after-free in netif_skb

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20210109125558.0d666227@kicinski-fedora-pc1c0hjn.dhcp.thefacebook.com>
Date:   Sat, 9 Jan 2021 12:55:58 -0800
From:   Jakub Kicinski <kuba@...nel.org>
To:     Igor Raits <igor.raits@...il.com>
Cc:     "netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: Kernel panic on shutdown (qede+bond+bridge) - KASAN:
 use-after-free in netif_skb_features+0x90a/0x9b0

On Thu, 07 Jan 2021 00:15:24 +0100 Igor Raits wrote:
> I've been trying out the latest CentOS 8 Stream kernel and found that I
> get kernel panic (https://bugzilla.redhat.com/show_bug.cgi?id=1913481)
> when trying to reboot the server. With debug kernel I've got following:
> 
> [  531.818434]
> ==================================================================
> [  531.818435] BUG: KASAN: use-after-free in
> netif_skb_features+0x90a/0x9b0
> [  531.818436] Read of size 8 at addr ffff893c74d54b50 by task systemd-
> shutdow/1
> [  531.818436]                            
> [  531.818437] CPU: 20 PID: 1 Comm: systemd-shutdow Tainted: G        W
> I      --------- -  - 4.18.0-259.el8.x86_64+debug #1
> [  531.818438] Hardware name: HPE ProLiant DL380 Gen10/ProLiant DL380
> Gen10, BIOS U30 07/16/2020

Have you managed to find a fix? If not perhaps try an upstream build?
Unlikely someone here will be willing to help with a RHEL kernel, and
we can't even access the bug report in bugzilla.