Hay
Date
July 8, 2025, 4:38 p.m.

Environment
qemu-arm64

[   17.958743] ==================================================================
[   17.958857] BUG: KFENCE: use-after-free read in kmalloc_uaf+0x184/0x338
[   17.958857] 
[   17.958957] Use-after-free read at 0x00000000c4449e63 (in kfence-#57):
[   17.959300]  kmalloc_uaf+0x184/0x338
[   17.959374]  kunit_try_run_case+0x170/0x3f0
[   17.959417]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.959461]  kthread+0x328/0x630
[   17.959737]  ret_from_fork+0x10/0x20
[   17.959830] 
[   17.960001] kfence-#57: 0x0000000088461a91-0x0000000084b154c5, size=10, cache=kmalloc-16
[   17.960001] 
[   17.960219] allocated by task 186 on cpu 1 at 17.957289s (0.002844s ago):
[   17.961484]  kmalloc_uaf+0xb8/0x338
[   17.961567]  kunit_try_run_case+0x170/0x3f0
[   17.961608]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.961657]  kthread+0x328/0x630
[   17.961693]  ret_from_fork+0x10/0x20
[   17.962004] 
[   17.962386] freed by task 186 on cpu 1 at 17.957367s (0.004864s ago):
[   17.962721]  kmalloc_uaf+0x11c/0x338
[   17.962816]  kunit_try_run_case+0x170/0x3f0
[   17.962866]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   17.963244]  kthread+0x328/0x630
[   17.963319]  ret_from_fork+0x10/0x20
[   17.963531] 
[   17.963682] CPU: 1 UID: 0 PID: 186 Comm: kunit_try_catch Tainted: G    B            N  6.15.6-rc1 #1 PREEMPT 
[   17.963784] Tainted: [B]=BAD_PAGE, [N]=TEST
[   17.963840] Hardware name: linux,dummy-virt (DT)
[   17.963971] ==================================================================