lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <690a3d6d.050a0220.98a6.00b6.GAE@google.com>
Date: Tue, 04 Nov 2025 09:52:45 -0800
From: syzbot <syzbot@...kaller.appspotmail.com>
To: andrew@...n.ch
Cc: andrew@...n.ch, davem@...emloft.net, dharanitharan725@...il.com, 
	edumazet@...gle.com, gregkh@...uxfoundation.org, kuba@...nel.org, 
	linux-usb@...r.kernel.org, netdev@...r.kernel.org, pabeni@...hat.com
Subject: Re: [PATCH] [PATCH] usb: rtl8150: Initialize buffers to fix KMSAN
 uninit-value in rtl8150_open

> On Tue, Nov 04, 2025 at 04:27:16PM +0000, Dharanitharan R wrote:
>> KMSAN reported an uninitialized value use in rtl8150_open().
>> Initialize rx_skb->data and intr_buff before submitting URBs to
>> ensure memory is in a defined state.
>> 
>> Reported-by: syzbot+b4d5d8faea6996fd@...kaller.appspotmail.com
>> Signed-off-by: Dharanitharan R <dharanitharan725@...il.com>
>> ---
>>  drivers/net/usb/rtl8150.c | 21 ++++++++++++++-------
>>  1 file changed, 14 insertions(+), 7 deletions(-)
>> 
>> diff --git a/drivers/net/usb/rtl8150.c b/drivers/net/usb/rtl8150.c
>> index 278e6cb6f4d9..f1a868f0032e 100644
>> --- a/drivers/net/usb/rtl8150.c
>> +++ b/drivers/net/usb/rtl8150.c
>> @@ -719,14 +719,15 @@ static netdev_tx_t rtl8150_start_xmit(struct sk_buff *skb,
>>  
>>  static void set_carrier(struct net_device *netdev)
>>  {
>> -	rtl8150_t *dev = netdev_priv(netdev);
>> -	short tmp;
>> +    rtl8150_t *dev = netdev_priv(netdev);
>> +    short tmp;
>
> You are messing up the whitespace here.
>
> Did you not read your own patch and notice this problem? checkpatch
> probably also complained.
>
>     Andrew
>
> ---
> pw-bot: cr

I see the command but can't find the corresponding bug.
The email is sent to  syzbot+HASH@...kaller.appspotmail.com address
but the HASH does not correspond to any known bug.
Please double check the address.


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ