Date
July 12, 2025, 11:09 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 20.822911] ================================================================== [ 20.823131] BUG: KFENCE: use-after-free read in kmem_cache_rcu_uaf+0x1f4/0x468 [ 20.823131] [ 20.823336] Use-after-free read at 0x00000000a6896088 (in kfence-#94): [ 20.823445] kmem_cache_rcu_uaf+0x1f4/0x468 [ 20.823547] kunit_try_run_case+0x170/0x3f0 [ 20.823641] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 20.823740] kthread+0x328/0x630 [ 20.823816] ret_from_fork+0x10/0x20 [ 20.825496] [ 20.825574] kfence-#94: 0x00000000a6896088-0x00000000f606a18e, size=200, cache=test_cache [ 20.825574] [ 20.826009] allocated by task 214 on cpu 0 at 20.676610s (0.149384s ago): [ 20.826508] kmem_cache_rcu_uaf+0x12c/0x468 [ 20.826622] kunit_try_run_case+0x170/0x3f0 [ 20.826714] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 20.826813] kthread+0x328/0x630 [ 20.827287] ret_from_fork+0x10/0x20 [ 20.827557] [ 20.827739] freed by task 214 on cpu 0 at 20.676752s (0.150974s ago): [ 20.828111] kmem_cache_rcu_uaf+0x16c/0x468 [ 20.828196] kunit_try_run_case+0x170/0x3f0 [ 20.828583] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 20.828700] kthread+0x328/0x630 [ 20.828937] ret_from_fork+0x10/0x20 [ 20.829216] [ 20.829533] CPU: 0 UID: 0 PID: 214 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT [ 20.829741] Tainted: [B]=BAD_PAGE, [N]=TEST [ 20.829805] Hardware name: linux,dummy-virt (DT) [ 20.830198] ==================================================================