Hay
Date
July 6, 2025, 11:09 p.m.

Environment
qemu-x86_64

[   13.654451] ==================================================================
[   13.655309] BUG: KFENCE: use-after-free write in memset_orig+0x72/0xb0
[   13.655309] 
[   13.655970] Use-after-free write at 0x(____ptrval____) (in kfence-#53):
[   13.656924]  memset_orig+0x72/0xb0
[   13.657440]  kmalloc_uaf_memset+0x1a3/0x360
[   13.658285]  kunit_try_run_case+0x1a5/0x480
[   13.658667]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.659013]  kthread+0x337/0x6f0
[   13.659568]  ret_from_fork+0x116/0x1d0
[   13.659952]  ret_from_fork_asm+0x1a/0x30
[   13.660195] 
[   13.660371] kfence-#53: 0x(____ptrval____)-0x(____ptrval____), size=33, cache=kmalloc-64
[   13.660371] 
[   13.660973] allocated by task 204 on cpu 1 at 13.653254s (0.007714s ago):
[   13.661476]  kmalloc_uaf_memset+0xa9/0x360
[   13.662044]  kunit_try_run_case+0x1a5/0x480
[   13.662743]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.663038]  kthread+0x337/0x6f0
[   13.663381]  ret_from_fork+0x116/0x1d0
[   13.663701]  ret_from_fork_asm+0x1a/0x30
[   13.663922] 
[   13.664050] freed by task 204 on cpu 1 at 13.653328s (0.010717s ago):
[   13.664280]  kmalloc_uaf_memset+0x12b/0x360
[   13.664806]  kunit_try_run_case+0x1a5/0x480
[   13.665042]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   13.665427]  kthread+0x337/0x6f0
[   13.666224]  ret_from_fork+0x116/0x1d0
[   13.666372]  ret_from_fork_asm+0x1a/0x30
[   13.666525] 
[   13.667276] CPU: 1 UID: 0 PID: 204 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT(voluntary) 
[   13.667937] Tainted: [B]=BAD_PAGE, [N]=TEST
[   13.668498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   13.669278] ==================================================================