Date
July 20, 2025, 8:11 p.m.
Environment | |
---|---|
qemu-arm64 |
[ 15.593289] ================================================================== [ 15.593585] BUG: KFENCE: use-after-free read in workqueue_uaf+0x270/0x4a8 [ 15.593585] [ 15.593786] Use-after-free read at 0x00000000b0101e7f (in kfence-#56): [ 15.594118] workqueue_uaf+0x270/0x4a8 [ 15.594200] kunit_try_run_case+0x170/0x3f0 [ 15.594249] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 15.594295] kthread+0x328/0x630 [ 15.594351] ret_from_fork+0x10/0x20 [ 15.594394] [ 15.595174] kfence-#56: 0x00000000b0101e7f-0x000000000d206ab9, size=32, cache=kmalloc-32 [ 15.595174] [ 15.595725] allocated by task 201 on cpu 1 at 15.590363s (0.005221s ago): [ 15.596684] workqueue_uaf+0x13c/0x4a8 [ 15.597050] kunit_try_run_case+0x170/0x3f0 [ 15.597194] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 15.597289] kthread+0x328/0x630 [ 15.597405] ret_from_fork+0x10/0x20 [ 15.597504] [ 15.597618] freed by task 24 on cpu 1 at 15.590629s (0.006916s ago): [ 15.597760] workqueue_uaf_work+0x18/0x30 [ 15.597802] process_one_work+0x530/0xf98 [ 15.598049] worker_thread+0x618/0xf38 [ 15.598139] kthread+0x328/0x630 [ 15.598268] ret_from_fork+0x10/0x20 [ 15.598423] [ 15.598543] CPU: 1 UID: 0 PID: 201 Comm: kunit_try_catch Tainted: G B N 6.16.0-rc6 #1 PREEMPT [ 15.598693] Tainted: [B]=BAD_PAGE, [N]=TEST [ 15.598772] Hardware name: linux,dummy-virt (DT) [ 15.598811] ==================================================================