Date
June 7, 2025, 10:40 a.m.
Environment | |
---|---|
qemu-x86_64 |
[ 18.029367] ================================================================== [ 18.030299] BUG: KFENCE: use-after-free read in kmalloc_uaf2+0x233/0x520 [ 18.030299] [ 18.031205] Use-after-free read at 0x(____ptrval____) (in kfence-#59): [ 18.032914] kmalloc_uaf2+0x233/0x520 [ 18.033418] kunit_try_run_case+0x1a6/0x480 [ 18.033665] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 18.034836] kthread+0x324/0x6e0 [ 18.035131] ret_from_fork+0x41/0x80 [ 18.035834] ret_from_fork_asm+0x1a/0x30 [ 18.036220] [ 18.037164] kfence-#59: 0x(____ptrval____)-0x(____ptrval____), size=43, cache=kmalloc-64 [ 18.037164] [ 18.038355] allocated by task 196 on cpu 0 at 18.027299s (0.010955s ago): [ 18.040005] kmalloc_uaf2+0xc7/0x520 [ 18.040383] kunit_try_run_case+0x1a6/0x480 [ 18.041029] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 18.041415] kthread+0x324/0x6e0 [ 18.041722] ret_from_fork+0x41/0x80 [ 18.042010] ret_from_fork_asm+0x1a/0x30 [ 18.042533] [ 18.042960] freed by task 196 on cpu 0 at 18.027412s (0.015360s ago): [ 18.044040] kmalloc_uaf2+0x14d/0x520 [ 18.044174] kunit_try_run_case+0x1a6/0x480 [ 18.044317] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 18.044592] kthread+0x324/0x6e0 [ 18.045579] ret_from_fork+0x41/0x80 [ 18.045994] ret_from_fork_asm+0x1a/0x30 [ 18.046308] [ 18.046631] CPU: 0 UID: 0 PID: 196 Comm: kunit_try_catch Tainted: G B N 6.14.11-rc1 #1 [ 18.047392] Tainted: [B]=BAD_PAGE, [N]=TEST [ 18.047630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 18.048651] ==================================================================