Date
Feb. 5, 2025, 2:09 p.m.
Environment | |
---|---|
qemu-arm64 |
[ 184.381939] ================================================================== [ 184.384909] BUG: KFENCE: use-after-free write in __memset+0x84/0x188 [ 184.384909] [ 184.386492] Use-after-free write at 0x00000000203be2d1 (in kfence-#250): [ 184.389597] __memset+0x84/0x188 [ 184.390550] kmalloc_double_kzfree+0xc8/0x1d8 [ 184.392230] kunit_try_run_case+0xf8/0x260 [ 184.393646] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 184.395285] kthread+0x18c/0x1a8 [ 184.396413] ret_from_fork+0x10/0x20 [ 184.397461] [ 184.398250] kfence-#250: 0x00000000203be2d1-0x00000000c32f07e1, size=16, cache=kmalloc-16 [ 184.398250] [ 184.400457] allocated by task 210 on cpu 1 at 184.380311s: [ 184.402944] __kmem_cache_alloc_node+0x288/0x2d0 [ 184.404142] kmalloc_trace+0x48/0x130 [ 184.405414] kmalloc_double_kzfree+0x9c/0x1d8 [ 184.406756] kunit_try_run_case+0xf8/0x260 [ 184.408244] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 184.409914] kthread+0x18c/0x1a8 [ 184.410948] ret_from_fork+0x10/0x20 [ 184.412049] [ 184.412669] freed by task 210 on cpu 1 at 184.380632s: [ 184.414586] kfree_sensitive+0x80/0xb0 [ 184.415718] kmalloc_double_kzfree+0xb8/0x1d8 [ 184.416897] kunit_try_run_case+0xf8/0x260 [ 184.418251] kunit_generic_run_threadfn_adapter+0x38/0x60 [ 184.419959] kthread+0x18c/0x1a8 [ 184.420923] ret_from_fork+0x10/0x20 [ 184.422108] [ 184.422683] CPU: 1 PID: 210 Comm: kunit_try_catch Tainted: G B N 6.6.76-rc1 #1 [ 184.424770] Hardware name: linux,dummy-virt (DT) [ 184.426034] ==================================================================