Date
July 6, 2025, 11:09 p.m.
Environment | |
---|---|
qemu-x86_64 |
[ 13.654451] ================================================================== [ 13.655309] BUG: KFENCE: use-after-free write in memset_orig+0x72/0xb0 [ 13.655309] [ 13.655970] Use-after-free write at 0x(____ptrval____) (in kfence-#53): [ 13.656924] memset_orig+0x72/0xb0 [ 13.657440] kmalloc_uaf_memset+0x1a3/0x360 [ 13.658285] kunit_try_run_case+0x1a5/0x480 [ 13.658667] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 13.659013] kthread+0x337/0x6f0 [ 13.659568] ret_from_fork+0x116/0x1d0 [ 13.659952] ret_from_fork_asm+0x1a/0x30 [ 13.660195] [ 13.660371] kfence-#53: 0x(____ptrval____)-0x(____ptrval____), size=33, cache=kmalloc-64 [ 13.660371] [ 13.660973] allocated by task 204 on cpu 1 at 13.653254s (0.007714s ago): [ 13.661476] kmalloc_uaf_memset+0xa9/0x360 [ 13.662044] kunit_try_run_case+0x1a5/0x480 [ 13.662743] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 13.663038] kthread+0x337/0x6f0 [ 13.663381] ret_from_fork+0x116/0x1d0 [ 13.663701] ret_from_fork_asm+0x1a/0x30 [ 13.663922] [ 13.664050] freed by task 204 on cpu 1 at 13.653328s (0.010717s ago): [ 13.664280] kmalloc_uaf_memset+0x12b/0x360 [ 13.664806] kunit_try_run_case+0x1a5/0x480 [ 13.665042] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 13.665427] kthread+0x337/0x6f0 [ 13.666224] ret_from_fork+0x116/0x1d0 [ 13.666372] ret_from_fork_asm+0x1a/0x30 [ 13.666525] [ 13.667276] CPU: 1 UID: 0 PID: 204 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc5 #1 PREEMPT(voluntary) [ 13.667937] Tainted: [B]=BAD_PAGE, [N]=TEST [ 13.668498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 13.669278] ==================================================================