Re: [PATCH] ieee802154: fix kernel-infoleak in dgram_recvmsg()
Stefan Schmidt <[email protected]>
| Newsgroups | dev.linux.lists.syzbot,org.kernel.vger.linux-kernel,org.kernel.vger.linux-wpan,org.kernel.vger.netdev |
|---|---|
| Message-ID | <[email protected]> |
Hello syzbot.
On Wed, 27 May 2026 20:18:18 +0000, syzbot wrote:
> KMSAN reported a kernel-infoleak in move_addr_to_user():
>
> BUG: KMSAN: kernel-infoleak in instrument_copy_to_user
> include/linux/instrumented.h:131 [inline]
> BUG: KMSAN: kernel-infoleak in _inline_copy_to_user
> include/linux/uaccess.h:205 [inline]
> BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
> lib/usercopy.c:26
> instrument_copy_to_user include/linux/instrumented.h:131 [inline]
> _inline_copy_to_user include/linux/uaccess.h:205 [inline]
> _copy_to_user+0xcc/0x120 lib/usercopy.c:26
> copy_to_user include/linux/uaccess.h:236 [inline]
> move_addr_to_user+0x2e7/0x440 net/socket.c:302
> ____sys_recvmsg+0x232/0x610 net/socket.c:2925
> ...
> Uninit was stored to memory at:
> ieee802154_addr_to_sa include/net/ieee802154_netdev.h:369 [inline]
> dgram_recvmsg+0xa09/0xbe0 net/ieee802154/socket.c:739
>
> [...]
Applied to wpan/wpan-next.git, thanks!
[1/1] ieee802154: fix kernel-infoleak in dgram_recvmsg()
https://git.kernel.org/wpan/wpan-next/c/4db86f8ab11b
regards,
Stefan Schmidt