Hay
Date
June 26, 2025, 9:10 a.m.

Environment
qemu-arm64

[   26.968567] ==================================================================
[   26.968657] BUG: KFENCE: use-after-free read in kmalloc_uaf2+0x1dc/0x468
[   26.968657] 
[   26.968970] Use-after-free read at 0x00000000953835b2 (in kfence-#57):
[   26.969456]  kmalloc_uaf2+0x1dc/0x468
[   26.969594]  kunit_try_run_case+0x170/0x3f0
[   26.969768]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   26.969872]  kthread+0x328/0x630
[   26.969917]  ret_from_fork+0x10/0x20
[   26.970141] 
[   26.970378] kfence-#57: 0x000000007e8cec2b-0x00000000582a89c3, size=43, cache=kmalloc-64
[   26.970378] 
[   26.970823] allocated by task 200 on cpu 0 at 26.962661s (0.008092s ago):
[   26.971708]  kmalloc_uaf2+0xc4/0x468
[   26.971960]  kunit_try_run_case+0x170/0x3f0
[   26.972206]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   26.972263]  kthread+0x328/0x630
[   26.972297]  ret_from_fork+0x10/0x20
[   26.972384] 
[   26.972900] freed by task 200 on cpu 0 at 26.962728s (0.009696s ago):
[   26.973468]  kmalloc_uaf2+0x134/0x468
[   26.973517]  kunit_try_run_case+0x170/0x3f0
[   26.973555]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   26.973853]  kthread+0x328/0x630
[   26.973912]  ret_from_fork+0x10/0x20
[   26.974007] 
[   26.974385] CPU: 0 UID: 0 PID: 200 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc3-next-20250626 #1 PREEMPT 
[   26.974484] Tainted: [B]=BAD_PAGE, [N]=TEST
[   26.974512] Hardware name: linux,dummy-virt (DT)
[   26.975071] ==================================================================