Wang Liang dc3382fffd tracing: kprobe-event: Fix null-ptr-deref in trace_kprobe_create_internal() ...

A crash was observed with the following output:

Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 1 UID: 0 PID: 2899 Comm: syz.2.399 Not tainted 6.17.0-rc5+ #5 PREEMPT(none)
RIP: 0010:trace_kprobe_create_internal+0x3fc/0x1440 kernel/trace/trace_kprobe.c:911
Call Trace:
 <TASK>
 trace_kprobe_create_cb+0xa2/0xf0 kernel/trace/trace_kprobe.c:1089
 trace_probe_create+0xf1/0x110 kernel/trace/trace_probe.c:2246
 dyn_event_create+0x45/0x70 kernel/trace/trace_dynevent.c:128
 create_or_delete_trace_kprobe+0x5e/0xc0 kernel/trace/trace_kprobe.c:1107
 trace_parse_run_command+0x1a5/0x330 kernel/trace/trace.c:10785
 vfs_write+0x2b6/0xd00 fs/read_write.c:684
 ksys_write+0x129/0x240 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x5d/0x2d0 arch/x86/entry/syscall_64.c:94
 </TASK>

Function kmemdup() may return NULL in trace_kprobe_create_internal(), add
check for it's return value.

Link: https://lore.kernel.org/all/20250916075816.3181175-1-wangliang74@huawei.com/

Fixes: 33b4e38baa ("tracing: kprobe-event: Allocate string buffers from heap")
Signed-off-by: Wang Liang <wangliang74@huawei.com>
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>

2025-09-18 07:36:41 +09:00

..

rv

Merge tag 'trace-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-08-01 10:29:36 -07:00

blktrace.c

Merge tag 'mm-nonmm-stable-2025-08-03-12-47' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2025-08-03 16:23:09 -07:00

bpf_trace.c

bpf: Clean up individual BTF_ID code

2025-07-16 18:34:42 -07:00

bpf_trace.h

tracing/treewide: Remove second parameter of __assign_str()

2024-05-22 20:14:47 -04:00

error_report-traces.c

…

fgraph.c

trace/fgraph: Fix error handling

2025-09-06 12:12:38 -04:00

fprobe.c

Merge tag 'probes-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-07-30 15:38:01 -07:00

ftrace_internal.h

function_graph: Make fgraph_update_pid_func() a stub for !DYNAMIC_FTRACE

2024-06-10 18:08:23 -04:00

ftrace.c

ftrace: Also allocate and copy hash for reading of filter files

2025-08-22 19:58:35 -04:00

Kconfig

Merge tag 'trace-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-08-01 10:29:36 -07:00

kprobe_event_gen_test.c

tracing: Fix wrong return in kprobe_event_gen_test.c

2023-03-19 12:20:48 -04:00

Makefile

tracing: Have eprobes have their own config option

2025-07-30 10:38:43 -04:00

pid_list.c

tracing: Cleanup upper_empty() in pid_list

2025-05-14 11:19:32 -04:00

pid_list.h

…

power-traces.c

PM: cpufreq: powernv/tracing: Move powernv_throttle trace event

2025-07-21 16:40:56 -04:00

preemptirq_delay_test.c

kernel: trace: preemptirq_delay_test: use offstack cpu mask

2025-07-08 18:17:38 -04:00

rethook.c

rethook: honor CONFIG_FTRACE_VALIDATE_RCU_IS_WATCHING in rethook_try_get()

2024-05-01 23:18:48 +09:00

ring_buffer_benchmark.c

ring-buffer: Use str_low_high() helper in ring_buffer_producer()

2024-10-19 11:12:25 -04:00

ring_buffer.c

ring-buffer: Remove redundant semicolons

2025-08-20 09:20:30 -04:00

rpm-traces.c

…

synth_event_gen_test.c

tracing / synthetic: Disable events after testing in synth_event_gen_test_init()

2023-12-21 10:04:45 -05:00

trace_benchmark.c

tracing: Improve benchmark test performance by using do_div()

2024-05-13 20:00:57 -04:00

trace_benchmark.h

tracing: Add numeric delta time to the trace event benchmark

2022-09-26 13:01:09 -04:00

trace_boot.c

tracing: Allow creating instances with specified system events

2023-12-18 23:14:16 -05:00

trace_branch.c

tracing: branch: Use trace_tracing_is_on_cpu() instead of "disabled" field

2025-05-09 15:19:10 -04:00

trace_btf.c

tracing/probes: Fix to search structure fields correctly

2024-02-17 21:25:42 +09:00

trace_btf.h

tracing/probes: Add a function to search a member of a struct/union

2023-08-23 09:40:16 +09:00

trace_clock.c

tracing: Use atomic64_inc_return() in trace_clock_counter()

2024-10-09 19:59:49 -04:00

trace_dynevent.c

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_dynevent.h

tracing: probes: Fix a possible race in trace_probe_log APIs

2025-05-13 22:23:34 +09:00

trace_entries.h

ftrace: Expose call graph depth as unsigned int

2025-05-08 09:36:08 -04:00

trace_eprobe.c

tracing: Have eprobes handle arrays

2025-07-24 22:57:32 +09:00

trace_event_perf.c

perf: Remove unnecessary parameter of security check

2025-02-26 14:13:58 -05:00

trace_events_filter_test.h

…

trace_events_filter.c

Merge tag 'trace-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-08-01 10:29:36 -07:00

trace_events_hist.c

tracing: Rename event_trigger_alloc() to trigger_data_alloc()

2025-05-09 15:19:11 -04:00

trace_events_inject.c

tracing: Have format file honor EVENT_FILE_FL_FREED

2024-08-07 18:12:46 -04:00

trace_events_synth.c

tracing: Add guard(ring_buffer_nest)

2025-08-01 16:49:15 -04:00

trace_events_trigger.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_events_user.c

trace: Remove redundant __GFP_NOWARN

2025-09-02 11:48:16 -04:00

trace_events.c

Merge tag 'trace-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-08-01 10:29:36 -07:00

trace_export.c

tracing: Add back FORTIFY_SOURCE logic to kernel_stack event structure

2023-07-30 18:11:44 -04:00

trace_fprobe.c

tracing: trace_fprobe: Fix typo of the semicolon

2025-07-29 08:37:52 +09:00

trace_functions_graph.c

fgraph: Copy args in intermediate storage with entry

2025-08-22 17:32:35 -04:00

trace_functions.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_hwlat.c

tracing: Replace opencoded cpumask_next_wrap() in move_to_next_cpu()

2025-07-08 18:17:29 -04:00

trace_irqsoff.c

tracing: Use atomic_inc_return() for updating "disabled" counter in irqsoff tracer

2025-05-09 15:19:10 -04:00

trace_kdb.c

ring-buffer: Remove ring_buffer_read_prepare_sync()

2025-07-22 20:01:41 -04:00

trace_kprobe_selftest.c

tracing: arm64: Avoid missing-prototype warnings

2023-07-12 12:06:04 -04:00

trace_kprobe_selftest.h

…

trace_kprobe.c

tracing: kprobe-event: Fix null-ptr-deref in trace_kprobe_create_internal()

2025-09-18 07:36:41 +09:00

trace_mmiotrace.c

tracing/mmiotrace: Remove reference to unused per CPU data pointer

2025-05-08 09:36:09 -04:00

trace_nop.c

…

trace_osnoise.c

tracing/osnoise: Fix null-ptr-deref in bitmap_parselist()

2025-09-06 12:12:38 -04:00

trace_output.c

tracing: Have unsigned int function args displayed as hexadecimal

2025-08-01 19:14:51 -04:00

trace_output.h

ftrace: Add print_function_args()

2025-03-04 11:27:23 -05:00

trace_preemptirq.c

tracing: Fix archs that still call tracepoints without RCU watching

2024-12-05 09:28:58 -05:00

trace_printk.c

…

trace_probe_kernel.h

tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails

2023-07-14 17:04:58 +09:00

trace_probe_tmpl.h

tracing/fprobe: Enable fprobe events with CONFIG_DYNAMIC_FTRACE_WITH_ARGS

2024-12-26 10:50:04 -05:00

trace_probe.c

Merge tag 'probes-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-07-30 15:38:01 -07:00

trace_probe.h

tracing: probe: Allocate traceprobe_parse_context from heap

2025-07-24 00:21:30 +09:00

trace_recursion_record.c

tracing: Use trace_create_file() to simplify creation of tracefs entries

2022-05-26 21:12:52 -04:00

trace_sched_switch.c

pid: allow pid_max to be set per pid namespace

2024-12-02 11:25:25 +01:00

trace_sched_wakeup.c

tracing: Convert the per CPU "disabled" counter to local from atomic

2025-05-09 15:19:10 -04:00

trace_selftest_dynamic.c

…

trace_selftest.c

fgraph: Pass ftrace_regs to retfunc

2024-12-26 10:50:03 -05:00

trace_seq.c

trace_seq: Increase the buffer size to almost two pages

2023-12-18 23:14:16 -05:00

trace_stack.c

Merge tag 'trace-v6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-05-29 21:04:36 -07:00

trace_stat.c

tracing: Switch trace_stat.c code over to use guard()

2024-12-26 10:38:37 -05:00

trace_stat.h

…

trace_synth.h

tracing: Allow synthetic events to pass around stacktraces

2023-01-25 10:31:24 -05:00

trace_syscalls.c

tracing/perf: Add might_fault check to syscall probes

2024-10-09 17:09:46 -04:00

trace_uprobe.c

tracing: uprobe-event: Allocate string buffers from heap

2025-07-24 00:21:58 +09:00

trace.c

tracing: Silence warning when chunk allocation fails in trace_pid_write

2025-09-08 14:56:43 -04:00

trace.h

Merge tag 'trace-v6.17-rc2-2' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace

2025-08-23 10:11:34 -04:00

tracing_map.c

tracing: Fix cmp_entries_dup() to respect sort() comparison rules

2024-12-04 10:38:24 -05:00

tracing_map.h

tracing: Remove unused extern declaration tracing_map_set_field_descr()

2023-07-23 11:08:14 -04:00