【hulk-5.10-欧拉OS】【kernel test】BUG: KASAN: use-after-free in cgroup_path_ns

1.1 【测试环境】（软硬件、组网环境描述清楚）

1.2 【OS及Kernel版本】
[root@x86_ci kernel]# git remote -vv
origin	ssh://git@codehub-dg-y.huawei.com:2222/hulk/mirror/OpenSourceCenter/kernel.git (fetch)
origin	ssh://git@codehub-dg-y.huawei.com:2222/hulk/mirror/OpenSourceCenter/kernel.git (push)
[root@x86_ci kernel]# git branch
* huawei/5.10.0-60.18.0.50.oe2203
[root@x86_ci kernel]# git log --oneline -1
420539d12c88 (HEAD -> huawei/5.10.0-60.18.0.50.oe2203, tag: hulkci, origin/huawei/5.10.0-60.18.0.50.oe2203) [Huawei] spi: fix kabi breakage in struct spi_controller
[root@x86_ci kernel]#

1.3 【测试步骤】（把执行操作、执行时间以及周边动作尽量描述清楚）
ci 概率问题
1.4 【实际结果】（实际的一些现象做详细的描述，测试人员可以加一些初步分析）
1.4.1 日志截图
\\10.175.103.168\shared2\202406210855

[35677.200751] [kernel test] [start]ltp/cpuset_inherit
[35682.555735] ==================================================================
[35682.555762] BUG: KASAN: use-after-free in cgroup_path_ns+0x112/0x150
[35682.555776] Read of size 8 at addr ffff8882a4b242b8 by task atop/19903
[35682.555783]
[35682.555801] CPU: 27 PID: 19903 Comm: atop Kdump: loaded Tainted: GF OE 5.10.0+ #1
[35682.555811] Hardware name: Huawei 2288H V5/BC11SPSCB0, BIOS 8.20 10/20/2021
[35682.555819] Call Trace:
[35682.555842] dump_stack+0x7d/0xa7
[35682.555864] print_address_description.constprop.0+0x19/0x170
[35682.555875] ? cgroup_path_ns+0x112/0x150
[35682.555889] __kasan_report.cold+0x6c/0x84
[35682.555901] ? print_unreferenced+0x390/0x3b0
[35682.555908] ? cgroup_path_ns+0x112/0x150
[35682.555918] kasan_report+0x3a/0x50
[35682.555925] cgroup_path_ns+0x112/0x150
[35682.555937] proc_cpuset_show+0x164/0x530
[35682.555949] proc_single_show+0x10f/0x1c0
[35682.555960] seq_read_iter+0x405/0x1020
[35682.555975] ? aa_path_link+0x2e0/0x2e0
[35682.555983] seq_read+0x324/0x500
[35682.555992] ? seq_read_iter+0x1020/0x1020
[35682.556000] ? common_file_perm+0x2a1/0x4a0
[35682.556011] ? fsnotify_unmount_inodes+0x380/0x380
[35682.556022] ? bpf_lsm_file_permission_wrapper+0xa/0x30
[35682.556032] ? security_file_permission+0x53/0x460
[35682.556041] vfs_read+0x122/0x420
[35682.556048] ksys_read+0xed/0x1c0
[35682.556056] ? __ia32_sys_pwrite64+0x1e0/0x1e0
[35682.556065] ? __audit_syscall_exit+0x741/0xa70
[35682.556076] do_syscall_64+0x33/0x40
[35682.556087] entry_SYSCALL_64_after_hwframe+0x67/0xcc
[35682.556096] RIP: 0033:0x7fc44397ce62
[35682.556106] Code: c0 e9 b2 fe ff ff 50 48 8d 3d 12 04 0c 00 e8 b5 fe 01 00 0f 1f 44 00 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 0f 05 <48> 3d 00 f0 ff ff 77 56 c3 0f 1f 44 00 00 48 83 ec 28 48 89 54 24
[35682.556112] RSP: 002b:00007ffec846af58 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[35682.556126] RAX: ffffffffffffffda RBX: 00000000010a1cb0 RCX: 00007fc44397ce62
[35682.556133] RDX: 0000000000000400 RSI: 0000000000fea480 RDI: 0000000000000087
[35682.556139] RBP: 00007fc443a733a0 R08: 0000000000000087 R09: 0000000000000000
[35682.556146] R10: 0000000000001000 R11: 0000000000000246 R12: 00000000010a1cb0
[35682.556151] R13: 0000000000000d68 R14: 00007fc443a727a0 R15: 0000000000000d68
[35682.556158]
[35682.556164] Allocated by task 1874278:
[35682.556175] kasan_save_stack+0x1b/0x40
[35682.556183] __kasan_kmalloc.constprop.0+0xb5/0xe0
[35682.556191] cgroup1_root_to_use+0x504/0x930
[35682.556198] cgroup1_get_tree+0xa1/0x2c0
[35682.556205] vfs_get_tree+0x84/0x2b0
[35682.556213] do_new_mount+0x20f/0x2a0
[35682.556220] path_mount+0x297/0x500
[35682.556227] __se_sys_mount+0x20b/0x2b0
[35682.556233] do_syscall_64+0x33/0x40

GVP openEuler/kernel

内容风险标识

评论 (1)

GVPopenEuler/kernel

内容风险标识