Date
May 15, 2025, 10:38 a.m.
Environment | |
---|---|
qemu-arm64 |
[ 18.171528] ================================================================== [ 18.171621] BUG: KFENCE: use-after-free write in __memset+0xc/0x20 [ 18.171621] [ 18.171702] Use-after-free write at 0x000000003bfa5165 (in kfence-#58): [ 18.172196] __memset+0xc/0x20 [ 18.172255] kmalloc_uaf_memset+0x170/0x310 [ 18.172295] kunit_try_run_case+0x170/0x3f0 [ 18.172345] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 18.172393] kthread+0x328/0x630 [ 18.172437] ret_from_fork+0x10/0x20 [ 18.172490] [ 18.172667] kfence-#58: 0x000000003bfa5165-0x00000000fadb8304, size=33, cache=kmalloc-64 [ 18.172667] [ 18.172869] allocated by task 186 on cpu 1 at 18.169071s (0.003731s ago): [ 18.174687] kmalloc_uaf_memset+0xb8/0x310 [ 18.174800] kunit_try_run_case+0x170/0x3f0 [ 18.174896] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 18.175357] kthread+0x328/0x630 [ 18.175456] ret_from_fork+0x10/0x20 [ 18.175650] [ 18.176584] freed by task 186 on cpu 1 at 18.169150s (0.006943s ago): [ 18.177931] kmalloc_uaf_memset+0x11c/0x310 [ 18.178007] kunit_try_run_case+0x170/0x3f0 [ 18.178111] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 18.178225] kthread+0x328/0x630 [ 18.178403] ret_from_fork+0x10/0x20 [ 18.178790] [ 18.179537] CPU: 1 UID: 0 PID: 186 Comm: kunit_try_catch Tainted: G B N 6.15.0-rc6-next-20250515 #1 PREEMPT [ 18.179932] Tainted: [B]=BAD_PAGE, [N]=TEST [ 18.180268] Hardware name: linux,dummy-virt (DT) [ 18.180402] ==================================================================