The kernel crashes with a message "BUG: unable to handle kernel paging request" in examineFile() from the 3rd party security module "talpa_core"
Issue
- The kernel crashes with a message "BUG: unable to handle kernel paging request" in examineFile() from the 3rd party security module "talpa_core"
[19199091.211100] BUG: unable to handle kernel paging request at ffffffffa046e1a4
[19199091.211684] IP: [<ffffffffa0480e22>] examineFile+0x2d2/0x910 [talpa_core]
[19199091.211878] PGD 194d067 PUD 194e063 PMD 35b2a067 PTE 577a8161
[19199091.212069] Oops: 0003 [#1] SMP
[19199091.212261] Modules linked in: talpa_vfshook(OE) talpa_pedconnector(OE) talpa_pedevice(OE) talpa_vcdevice(OE) talpa_core(OE) talpa_linux(OE) iptable_nat nf_nat_ipv4 nf_nat tcp_diag inet_diag nfsv3 rpcsec_gss_krb5 nfsv4 dns_resolver nfs fscache twnotify(OE) binfmt_misc talpa_syscallhook(OE) vmw_vsock_vmci_transport vsock nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack iptable_filter dm_mirror dm_region_hash dm_log dm_mod coretemp crc32_pclmul ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper cryptd ppdev vmw_balloon pcspkr sg vmw_vmci shpchp i2c_piix4 parport_pc parport nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables xfs libcrc32c sr_mod cdrom sd_mod crc_t10dif crct10dif_generic ata_generic pata_acpi crct10dif_pclmul crct10dif_common crc32c_intel serio_raw vmwgfx
[19199091.213800] drm_kms_helper vmxnet3 ttm drm vmw_pvscsi ata_piix i2c_core libata floppy [last unloaded: talpa_linux]
[19199091.214177] CPU: 1 PID: 5838 Comm: httpd Tainted: G OE ------------ 3.10.0-327.36.3.el7.x86_64 #1
[19199091.214575] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 09/17/2015
[19199091.214993] task: ffff880231315c00 ti: ffff880063d88000 task.ti: ffff880063d88000
[19199091.215422] RIP: 0010:[<ffffffffa0480e22>] [<ffffffffa0480e22>] examineFile+0x2d2/0x910 [talpa_core]
[19199091.215873] RSP: 0018:ffff880063d8bd78 EFLAGS: 00010246
[19199091.216325] RAX: 0000000000000086 RBX: ffff88023136a9c0 RCX: 0000000000000000
[19199091.216793] RDX: 0000000000004476 RSI: 00000000000000e4 RDI: ffff880117364ffe
[19199091.217266] RBP: ffff880063d8be10 R08: ffff880117364000 R09: 0000000000001000
[19199091.217748] R10: 00000000000034a3 R11: 4f4e006e69622f72 R12: ffff880101451200
[19199091.218240] R13: ffffffffa046e1a0 R14: ffff880233e66000 R15: ffff88023136a9c0
[19199091.218750] FS: 00007f9a16c8e880(0000) GS:ffff88023fd00000(0000) knlGS:0000000000000000
[19199091.219263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[19199091.219782] CR2: ffffffffa046e1a4 CR3: 0000000050f4f000 CR4: 00000000000407e0
[19199091.220339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[19199091.220914] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[19199091.221450] Stack:
[19199091.221983] 0000000000000000 ffff880233e66168 ffff880100000000 0000000000000001
[19199091.222547] ffff88023136ab40 ffff88023136a9c0 ffff8801271879c0 0000000000000000
[19199091.223112] ffff88013fac1fcb 000000020101d4d2 ffff880200000034 ffff8801252235b8
[19199091.223684] Call Trace:
[19199091.224258] [<ffffffffa047a941>] examineFileInfo+0xd1/0x260 [talpa_core]
[19199091.224854] [<ffffffffa049802f>] talpaRelease+0x10f/0x210 [talpa_vfshook]
[19199091.225459] [<ffffffff811e0ac9>] __fput+0xe9/0x270
[19199091.226062] [<ffffffff811e0d8e>] ____fput+0xe/0x10
[19199091.226667] [<ffffffff810a2377>] task_work_run+0xa7/0xe0
[19199091.227278] [<ffffffff81014b12>] do_notify_resume+0x92/0xb0
[19199091.227897] [<ffffffff81646dfd>] int_signal+0x12/0x17
[19199091.228519] Code: 89 c7 ff 50 30 48 85 c0 0f 84 29 06 00 00 48 89 c7 e8 53 aa e7 e0 31 c9 83 f8 01 0f 44 c1 89 85 78 ff ff ff 44 89 f8 4c 8b 7d 90 <41> c7 45 04 03 00 00 00 83 e8 0c 41 89 45 08 4c 89 ff 41 ff 57
[19199091.229893] RIP [<ffffffffa0480e22>] examineFile+0x2d2/0x910 [talpa_core]
[19199091.230579] RSP <ffff880063d8bd78>
[19199091.231265] CR2: ffffffffa046e1a4
Environment
- Red Hat Enterprise Linux 7.2 (kernel-3.10.0-327.36.3.el7)
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.