netdev - Re: [syzbot] BUG: unable to handle kernel NULL pointer dereference in __tcp_transmit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 24 Mar 2022 09:11:33 +0100
From:   Karsten Graul <kgraul@...ux.ibm.com>
To:     Eric Dumazet <edumazet@...gle.com>,
        syzbot <syzbot+090d23ddbd5cd185c2e0@...kaller.appspotmail.com>
Cc:     Andrii Nakryiko <andrii@...nel.org>,
        Alexei Starovoitov <ast@...nel.org>, bpf <bpf@...r.kernel.org>,
        Daniel Borkmann <daniel@...earbox.net>,
        David Miller <davem@...emloft.net>,
        David Ahern <dsahern@...nel.org>,
        John Fastabend <john.fastabend@...il.com>,
        Martin KaFai Lau <kafai@...com>,
        KP Singh <kpsingh@...nel.org>,
        Jakub Kicinski <kuba@...nel.org>,
        LKML <linux-kernel@...r.kernel.org>,
        netdev <netdev@...r.kernel.org>, Paolo Abeni <pabeni@...hat.com>,
        Song Liu <songliubraving@...com>,
        syzkaller-bugs <syzkaller-bugs@...glegroups.com>,
        Yonghong Song <yhs@...com>,
        Hideaki YOSHIFUJI <yoshfuji@...ux-ipv6.org>,
        Wenjia Zhang <wenjia@...ux.ibm.com>,
        Thorsten Winkler <twinkler@...ux.ibm.com>,
        Alexandra Winter <wintera@...ux.ibm.com>
Subject: Re: [syzbot] BUG: unable to handle kernel NULL pointer dereference in
 __tcp_transmit_skb

On 24/03/2022 02:41, Eric Dumazet wrote:
> On Wed, Mar 23, 2022 at 5:13 PM syzbot
> <syzbot+090d23ddbd5cd185c2e0@...kaller.appspotmail.com> wrote:
>>
>> Hello,
>>
>> syzbot found the following issue on:
>>
>> HEAD commit:    36c2e31ad25b net: geneve: add missing netlink policy and s..
>> git tree:       net-next
>> console output: https://syzkaller.appspot.com/x/log.txt?x=17c308a5700000
>> kernel config:  https://syzkaller.appspot.com/x/.config?x=4a15e2288cf165c9
>> dashboard link: https://syzkaller.appspot.com/bug?extid=090d23ddbd5cd185c2e0
>> compiler:       gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
>> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=171eadbd700000
>> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=12cacda3700000
>>
>> IMPORTANT: if you fix the issue, please add the following tag to the commit:
>> Reported-by: syzbot+090d23ddbd5cd185c2e0@...kaller.appspotmail.com
>>
> 
> AF_SMC does not handle TCP_REPAIR properly.
> 
> Look at commit d9e4c129181004e ("mptcp: only admit explicitly
> supported sockopt") for an equivalent bug/fix.

Got it, we will fix that.