Hay
Date
July 8, 2025, 7:07 p.m.

Environment
qemu-arm64

[   19.414845] ==================================================================
[   19.414937] BUG: KFENCE: use-after-free write in __memset+0xc/0x20
[   19.414937] 
[   19.415423] Use-after-free write at 0x00000000c36ab212 (in kfence-#54):
[   19.415847]  __memset+0xc/0x20
[   19.416032]  kmalloc_uaf_memset+0x170/0x310
[   19.416141]  kunit_try_run_case+0x170/0x3f0
[   19.416237]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.416556]  kthread+0x328/0x630
[   19.416659]  ret_from_fork+0x10/0x20
[   19.416707] 
[   19.417261] kfence-#54: 0x00000000c36ab212-0x0000000041f9e45c, size=33, cache=kmalloc-64
[   19.417261] 
[   19.417496] allocated by task 186 on cpu 1 at 19.413346s (0.004064s ago):
[   19.417947]  kmalloc_uaf_memset+0xb8/0x310
[   19.418025]  kunit_try_run_case+0x170/0x3f0
[   19.418067]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.418120]  kthread+0x328/0x630
[   19.418166]  ret_from_fork+0x10/0x20
[   19.418282] 
[   19.418414] freed by task 186 on cpu 1 at 19.413407s (0.004913s ago):
[   19.418565]  kmalloc_uaf_memset+0x11c/0x310
[   19.418604]  kunit_try_run_case+0x170/0x3f0
[   19.418642]  kunit_generic_run_threadfn_adapter+0x88/0x100
[   19.418684]  kthread+0x328/0x630
[   19.418751]  ret_from_fork+0x10/0x20
[   19.419627] 
[   19.420029] CPU: 1 UID: 0 PID: 186 Comm: kunit_try_catch Tainted: G    B            N  6.16.0-rc5 #1 PREEMPT 
[   19.420492] Tainted: [B]=BAD_PAGE, [N]=TEST
[   19.420525] Hardware name: linux,dummy-virt (DT)
[   19.420885] ==================================================================