[syzbot] KASAN: use-after-free Read in udl_get_urb_timeout

Takashi Iwai tiwai at suse.de
Mon Aug 22 12:26:52 UTC 2022


On Mon, 22 Aug 2022 11:09:31 +0200,
syzbot wrote:
> 
> Hello,
> 
> syzbot found the following issue on:
> 
> HEAD commit:    5b6a4bf680d6 Add linux-next specific files for 20220818
> git tree:       linux-next
> console+strace: https://syzkaller.appspot.com/x/log.txt?x=12341a3d080000
> kernel config:  https://syzkaller.appspot.com/x/.config?x=ead6107a3bbe3c62
> dashboard link: https://syzkaller.appspot.com/bug?extid=f24934fe125a19d77eae
> compiler:       gcc (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2
> syz repro:      https://syzkaller.appspot.com/x/repro.syz?x=12731867080000
> C reproducer:   https://syzkaller.appspot.com/x/repro.c?x=165b64f3080000
> 
> The issue was bisected to:
> 
> commit e25d5954264d1871ab2792c7ca2298b811462500
> Author: Takashi Iwai <tiwai at suse.de>
> Date:   Thu Aug 4 07:58:25 2022 +0000
> 
>     drm/udl: Kill pending URBs at suspend and disconnect

FYI, the fix including the revert of this commit was already
submitted, waiting for review & merge:
  https://lore.kernel.org/r/20220816153655.27526-1-tiwai@suse.de


thanks,

Takashi


More information about the dri-devel mailing list