Re: [syzbot] [kernel?] KASAN: global-out-of-bounds Read in uevent_store

From: Greg KH

Date: Mon Aug 24 2026 - 03:13:36 EST


On Mon, Aug 24, 2026 at 12:37:48PM +0530, Jeffin Philip wrote:
> #syz test upstream
>
> diff --git a/lib/kobject_uevent.c b/lib/kobject_uevent.c
> index ddbc4d7482d2..b03562301bfe 100644
> --- a/lib/kobject_uevent.c
> +++ b/lib/kobject_uevent.c
> @@ -83,7 +83,7 @@ static int kobject_action_type(const char *buf, size_t count,
> for (action = 0; action < ARRAY_SIZE(kobject_actions); action++) {
> if (strncmp(kobject_actions[action], buf, count_first) != 0)
> continue;
> - if (kobject_actions[action][count_first] != '\0')
> + if (strlen(kobject_actions[action]) != count_first)
> continue;
> if (args)
> *args = args_start;
>

Why not look at this patch:
https://lore.kernel.org/r/200d27f7.1471a.1a0138c92da.Coremail.stitch@xxxxxxxxxx