Hay
Date
June 7, 2025, 10:40 a.m.

Environment
qemu-x86_64

[   18.029367] ==================================================================
[   18.030299] BUG: KFENCE: use-after-free read in kmalloc_uaf2+0x233/0x520
[   18.030299] 
[   18.031205] Use-after-free read at 0x(____ptrval____) (in kfence-#59):
[   18.032914]  kmalloc_uaf2+0x233/0x520
[   18.033418]  kunit_try_run_case+0x1a6/0x480
[   18.033665]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.034836]  kthread+0x324/0x6e0
[   18.035131]  ret_from_fork+0x41/0x80
[   18.035834]  ret_from_fork_asm+0x1a/0x30
[   18.036220] 
[   18.037164] kfence-#59: 0x(____ptrval____)-0x(____ptrval____), size=43, cache=kmalloc-64
[   18.037164] 
[   18.038355] allocated by task 196 on cpu 0 at 18.027299s (0.010955s ago):
[   18.040005]  kmalloc_uaf2+0xc7/0x520
[   18.040383]  kunit_try_run_case+0x1a6/0x480
[   18.041029]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.041415]  kthread+0x324/0x6e0
[   18.041722]  ret_from_fork+0x41/0x80
[   18.042010]  ret_from_fork_asm+0x1a/0x30
[   18.042533] 
[   18.042960] freed by task 196 on cpu 0 at 18.027412s (0.015360s ago):
[   18.044040]  kmalloc_uaf2+0x14d/0x520
[   18.044174]  kunit_try_run_case+0x1a6/0x480
[   18.044317]  kunit_generic_run_threadfn_adapter+0x85/0xf0
[   18.044592]  kthread+0x324/0x6e0
[   18.045579]  ret_from_fork+0x41/0x80
[   18.045994]  ret_from_fork_asm+0x1a/0x30
[   18.046308] 
[   18.046631] CPU: 0 UID: 0 PID: 196 Comm: kunit_try_catch Tainted: G    B            N 6.14.11-rc1 #1
[   18.047392] Tainted: [B]=BAD_PAGE, [N]=TEST
[   18.047630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   18.048651] ==================================================================