Hay
Date
July 15, 2025, 2:10 p.m.

Environment
qemu-arm64

[  106.830549] ==================================================================
[  106.832072] BUG: KFENCE: use-after-free read in ksize_uaf+0xe8/0x330
[  106.832072] 
[  106.833159] Use-after-free read at 0x000000003a195194 (in kfence-#125):
[  106.833776]  ksize_uaf+0xe8/0x330
[  106.834276]  kunit_try_run_case+0x8c/0x124
[  106.834796]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  106.835355]  kthread+0x15c/0x170
[  106.835815]  ret_from_fork+0x10/0x20
[  106.836243] 
[  106.836829] kfence-#125: 0x000000003a195194-0x000000004805e587, size=120, cache=kmalloc-128
[  106.836829] 
[  106.837684] allocated by task 242 on cpu 1 at 106.825393s:
[  106.838842]  __kmem_cache_alloc_node+0x2dc/0x32c
[  106.839341]  kmalloc_trace+0x58/0x150
[  106.839788]  ksize_uaf+0x9c/0x330
[  106.840205]  kunit_try_run_case+0x8c/0x124
[  106.840877]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  106.841466]  kthread+0x15c/0x170
[  106.841895]  ret_from_fork+0x10/0x20
[  106.842325] 
[  106.842585] freed by task 242 on cpu 1 at 106.825894s:
[  106.843299]  ksize_uaf+0xbc/0x330
[  106.843716]  kunit_try_run_case+0x8c/0x124
[  106.844198]  kunit_generic_run_threadfn_adapter+0x38/0x54
[  106.845003]  kthread+0x15c/0x170
[  106.845402]  ret_from_fork+0x10/0x20
[  106.845871] 
[  106.846109] CPU: 1 PID: 242 Comm: kunit_try_catch Tainted: G    B            N 6.1.146-rc1 #1
[  106.846866] Hardware name: linux,dummy-virt (DT)
[  106.847305] ==================================================================