Thread (2 messages) flat view 2 messages, 2 authors, 7d ago

Re: [BUG] KASAN: slab-use-after-free in usb_control_msg / kobject_put (vhci_hcd)

From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: 2026-09-09 07:36:29
Also in: lkml

On Wed, Sep 09, 2026 at 05:24:38AM +0330, Amir Mohammad Jahangirzad wrote:
We have found two related KASAN slab-use-after-free bugs in the USB
subsystem (specifically involving vhci_hcd and usbip) using syzkaller.
There are lot of those, please see the mailing list for suggested
patches, or better yet, submit patches yourself for the reported
problems as you have a reproducer.

But note, usbip runs on a trusted network, with trusted devices, so
perhaps you are fuzzing the wrong thing?

thanks,

greg k-h
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help