[abrt] tmux: tmux killed by SIGSEGV
auton.sysnotify at gmail.com
auton.sysnotify at gmail.com
Mon Dec 8 22:41:58 EST 2025
reason: tmux killed by SIGSEGV
cmdline: tmux new -s test
executable: /usr/bin/tmux
package: tmux-1.8-4.el7
component: tmux
pid: 65807
pwd: /zfsauton2/home/wentsec
hostname: gpu10.int.autonlab.org
count: 1
abrt_version: 2.1.11
analyzer: CCpp
architecture: x86_64
event_log:
global_pid: 65807
kernel: 3.10.0-1160.119.1.el7.x86_64
last_occurrence: 1765251717
os_release: Springdale Linux release 7.9 (Verona)
pkg_arch: x86_64
pkg_epoch: 0
pkg_fingerprint: 16CF C333 41A4 0948
pkg_name: tmux
pkg_release: 4.el7
pkg_vendor: (none)
pkg_version: 1.8
runlevel: N 3
time: Mon 08 Dec 2025 10:41:57 PM EST
type: CCpp
uid: 1354
username: wentsec
uuid: 7967b280f71451eb2f8173d4f72ce058fa585634
core_backtrace:
:{ "signal": 11
:, "executable": "/usr/bin/tmux"
:, "stacktrace":
: [ { "crash_thread": true
: , "frames":
: [ { "address": 140122813638098
: , "build_id": "74eaa891713973e63dcc2374fb814ca240f9efcf"
: , "build_id_offset": 1406418
: , "function_name": "__memcpy_ssse3_back"
: , "file_name": "/lib64/libc.so.6"
: }
: , { "address": 140122818519650
: , "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
: , "build_id_offset": 94818
: , "function_name": "evbuffer_add"
: , "file_name": "/lib64/libevent-2.0.so.5"
: }
: , { "address": 140122818530112
: , "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
: , "build_id_offset": 105280
: , "function_name": "bufferevent_write"
: , "file_name": "/lib64/libevent-2.0.so.5"
: }
: , { "address": 4406739
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 212435
: , "function_name": "tty_puts.part.0"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4409249
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 214945
: , "function_name": "tty_start_tty"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4362351
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 168047
: , "function_name": "server_client_msg_dispatch"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4363165
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 168861
: , "function_name": "server_client_callback"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 140122818492948
: , "build_id": "fafe26a6aca753913be50c41e96e498b09df5265"
: , "build_id_offset": 68116
: , "function_name": "event_base_loop"
: , "file_name": "/lib64/libevent-2.0.so.5"
: }
: , { "address": 4369994
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 175690
: , "function_name": "server_loop"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4371805
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 177501
: , "function_name": "server_start"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4214122
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 19818
: , "function_name": "client_connect"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4214853
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 20549
: , "function_name": "client_main"
: , "file_name": "/usr/bin/tmux"
: }
: , { "address": 4209293
: , "build_id": "c6df4ab637ba8e334b45830f57cd1e1aac55c961"
: , "build_id_offset": 14989
: , "function_name": "main"
: , "file_name": "/usr/bin/tmux"
: } ]
: } ]
:}
cgroup:
:11:freezer:/
:10:cpuset:/
:9:devices:/
:8:hugetlb:/
:7:pids:/
:6:cpuacct,cpu:/
:5:blkio:/
:4:memory:/
:3:net_prio,net_cls:/
:2:perf_event:/
:1:name=systemd:/user.slice/user-1354.slice/session-29.scope
dso_list:
:/usr/lib64/ld-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/lib64/libtinfo.so.5.9 ncurses-libs-5.9-14.20130511.el7_4.x86_64 (None) 1545333030
:/usr/lib64/libc-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/lib64/libresolv-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/bin/tmux tmux-1.8-4.el7.x86_64 (None) 1545353382
:/usr/lib64/libevent-2.0.so.5.1.9 libevent-2.0.21-4.el7.x86_64 (None) 1545350198
:/usr/lib64/libncurses.so.5.9 ncurses-libs-5.9-14.20130511.el7_4.x86_64 (None) 1545333030
:/usr/lib64/libdl-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/lib64/libnss_files-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/lib64/libutil-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
:/usr/lib64/libpthread-2.17.so glibc-2.17-326.el7_9.3.x86_64 (None) 1722530627
environ:
:XDG_SESSION_ID=29
:HOSTNAME=gpu10.int.autonlab.org
:SELINUX_ROLE_REQUESTED=
:TERM=xterm-256color
:SHELL=/bin/bash
:HISTSIZE=1000
:'SSH_CLIENT=192.168.6.9 43838 22'
:CVSROOT=svnhub.int.autonlab.org:/var/CVS
:SELINUX_USE_CURRENT_RANGE=
:QTDIR=/usr/lib64/qt-3.3
:QTINC=/usr/lib64/qt-3.3/include
:SSH_TTY=/dev/pts/1
:QT_GRAPHICSSYSTEM_CHECKED=1
:USER=wentsec
:LD_LIBRARY_PATH=/usr/local/cuda/lib64:
:LS_COLORS=rs=0:di=38;5;27:ln=38;5;51:mh=44;38;5;15:pi=40;38;5;11:so=38;5;13:do=38;5;5:bd=48;5;232;38;5;11:cd=48;5;232;38;5;3:or=48;5;232;38;5;9:mi=05;48;5;232;38;5;15:su=48;5;196;38;5;15:sg=48;5;11;38;5;16:ca=48;5;196;38;5;226:tw=48;5;10;38;5;16:ow=48;5;10;38;5;21:st=48;5;21;38;5;15:ex=38;5;34:*.tar=38;5;9:*.tgz=38;5;9:*.arc=38;5;9:*.arj=38;5;9:*.taz=38;5;9:*.lha=38;5;9:*.lz4=38;5;9:*.lzh=38;5;9:*.lzma=38;5;9:*.tlz=38;5;9:*.txz=38;5;9:*.tzo=38;5;9:*.t7z=38;5;9:*.zip=38;5;9:*.z=38;5;9:*.Z=38;5;9:*.dz=38;5;9:*.gz=38;5;9:*.lrz=38;5;9:*.lz=38;5;9:*.lzo=38;5;9:*.xz=38;5;9:*.bz2=38;5;9:*.bz=38;5;9:*.tbz=38;5;9:*.tbz2=38;5;9:*.tz=38;5;9:*.deb=38;5;9:*.rpm=38;5;9:*.jar=38;5;9:*.war=38;5;9:*.ear=38;5;9:*.sar=38;5;9:*.rar=38;5;9:*.alz=38;5;9:*.ace=38;5;9:*.zoo=38;5;9:*.cpio=38;5;9:*.7z=38;5;9:*.rz=38;5;9:*.cab=38;5;9:*.jpg=38;5;13:*.jpeg=38;5;13:*.gif=38;5;13:*.bmp=38;5;13:*.pbm=38;5;13:*.pgm=38;5;13:*.ppm=38;5;13:*.tga=38;5;13:*.xbm=38;5;13:*.xpm=38;5;13:*.tif=38;5;13:*.tiff=38;5;13:*.png=38;5;13:*.svg=38;5;13:*.svgz=38;5;13:*.mng=38;5;13:*.pcx=38;5;13:*.mov=38;5;13:*.mpg=38;5;13:*.mpeg=38;5;13:*.m2v=38;5;13:*.mkv=38;5;13:*.webm=38;5;13:*.ogm=38;5;13:*.mp4=38;5;13:*.m4v=38;5;13:*.mp4v=38;5;13:*.vob=38;5;13:*.qt=38;5;13:*.nuv=38;5;13:*.wmv=38;5;13:*.asf=38;5;13:*.rm=38;5;13:*.rmvb=38;5;13:*.flc=38;5;13:*.avi=38;5;13:*.fli=38;5;13:*.flv=38;5;13:*.gl=38;5;13:*.dl=38;5;13:*.xcf=38;5;13:*.xwd=38;5;13:*.yuv=38;5;13:*.cgm=38;5;13:*.emf=38;5;13:*.axv=38;5;13:*.anx=38;5;13:*.ogv=38;5;13:*.ogx=38;5;13:*.aac=38;5;45:*.au=38;5;45:*.flac=38;5;45:*.mid=38;5;45:*.midi=38;5;45:*.mka=38;5;45:*.mp3=38;5;45:*.mpc=38;5;45:*.ogg=38;5;45:*.ra=38;5;45:*.wav=38;5;45:*.axa=38;5;45:*.oga=38;5;45:*.spx=38;5;45:*.xspf=38;5;45:
:MAIL=/var/spool/mail/wentsec
:PATH=/zfsauton2/home/wentsec/.local/bin:/usr/local/cuda/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/bin:/usr/local/sbin:/usr/sbin
:MKL_NUM_THREADS=1
:PWD=/zfsauton2/home/wentsec
:NUMEXPR_NUM_THREADS=1
:SVN=svn://svnhub.int.autonlab.org/psycho/auton
:LANG=zh_TW.UTF-8
:MODULEPATH=/usr/share/Modules/modulefiles:/etc/modulefiles:/usr/local/share/Modules/modulefiles:/opt/share/Modules/modulefiles
:LOADEDMODULES=
:SELINUX_LEVEL_REQUESTED=
:HISTCONTROL=ignoredups
:SHLVL=1
:HOME=/zfsauton2/home/wentsec
:LOGNAME=wentsec
:QTLIB=/usr/lib64/qt-3.3/lib
:CVS_RSH=ssh
:'SSH_CONNECTION=192.168.6.9 43838 192.168.6.111 22'
:MODULESHOME=/usr/share/Modules
:OMP_NUM_THREADS=1
:'LESSOPEN=||/usr/bin/lesspipe.sh %s'
:XDG_RUNTIME_DIR=/run/user/1354
:'BASH_FUNC_module()=() { eval `/usr/bin/modulecmd bash $*`\n}'
:_=/usr/bin/tmux
exploitable:
:Likely crash reason: Jump to an invalid address
:Exploitable rating (0-9 scale): 6
limits:
:Limit Soft Limit Hard Limit Units
:Max cpu time unlimited unlimited seconds
:Max file size unlimited unlimited bytes
:Max data size unlimited unlimited bytes
:Max stack size 8388608 unlimited bytes
:Max core file size 0 unlimited bytes
:Max resident set unlimited unlimited bytes
:Max processes 4096 767488 processes
:Max open files 1024 4096 files
:Max locked memory 65536 65536 bytes
:Max address space unlimited unlimited bytes
:Max file locks unlimited unlimited locks
:Max pending signals 767488 767488 signals
:Max msgqueue size 819200 819200 bytes
:Max nice priority 0 0
:Max realtime priority 0 0
:Max realtime timeout unlimited unlimited us
machineid:
:systemd=07061310645b4fa280d6e9ac62416ca3
:sosreport_uploader-dmidecode=3c8c346bc5d377722636667cd4bc986b0c7d593e8474327c2fd553460a6b842d
maps:
:00400000-00462000 r-xp 00000000 fd:00 101901469 /usr/bin/tmux
:00661000-00662000 r--p 00061000 fd:00 101901469 /usr/bin/tmux
:00662000-00664000 rw-p 00062000 fd:00 101901469 /usr/bin/tmux
:00664000-0067f000 rw-p 00000000 00:00 0
:00f60000-00f81000 rw-p 00000000 00:00 0 [heap]
:00f81000-010ea000 rw-p 00000000 00:00 0 [heap]
:7f70e20f8000-7f70e2104000 r-xp 00000000 fd:00 63669 /usr/lib64/libnss_files-2.17.so
:7f70e2104000-7f70e2303000 ---p 0000c000 fd:00 63669 /usr/lib64/libnss_files-2.17.so
:7f70e2303000-7f70e2304000 r--p 0000b000 fd:00 63669 /usr/lib64/libnss_files-2.17.so
:7f70e2304000-7f70e2305000 rw-p 0000c000 fd:00 63669 /usr/lib64/libnss_files-2.17.so
:7f70e2305000-7f70e230b000 rw-p 00000000 00:00 0
:7f70e230b000-7f70e2322000 r-xp 00000000 fd:00 63679 /usr/lib64/libpthread-2.17.so
:7f70e2322000-7f70e2521000 ---p 00017000 fd:00 63679 /usr/lib64/libpthread-2.17.so
:7f70e2521000-7f70e2522000 r--p 00016000 fd:00 63679 /usr/lib64/libpthread-2.17.so
:7f70e2522000-7f70e2523000 rw-p 00017000 fd:00 63679 /usr/lib64/libpthread-2.17.so
:7f70e2523000-7f70e2527000 rw-p 00000000 00:00 0
:7f70e2527000-7f70e2529000 r-xp 00000000 fd:00 63652 /usr/lib64/libdl-2.17.so
:7f70e2529000-7f70e2729000 ---p 00002000 fd:00 63652 /usr/lib64/libdl-2.17.so
:7f70e2729000-7f70e272a000 r--p 00002000 fd:00 63652 /usr/lib64/libdl-2.17.so
:7f70e272a000-7f70e272b000 rw-p 00003000 fd:00 63652 /usr/lib64/libdl-2.17.so
:7f70e272b000-7f70e28ef000 r-xp 00000000 fd:00 63645 /usr/lib64/libc-2.17.so
:7f70e28ef000-7f70e2aee000 ---p 001c4000 fd:00 63645 /usr/lib64/libc-2.17.so
:7f70e2aee000-7f70e2af2000 r--p 001c3000 fd:00 63645 /usr/lib64/libc-2.17.so
:7f70e2af2000-7f70e2af4000 rw-p 001c7000 fd:00 63645 /usr/lib64/libc-2.17.so
:7f70e2af4000-7f70e2af9000 rw-p 00000000 00:00 0
:7f70e2af9000-7f70e2b0f000 r-xp 00000000 fd:00 63905 /usr/lib64/libresolv-2.17.so
:7f70e2b0f000-7f70e2d0f000 ---p 00016000 fd:00 63905 /usr/lib64/libresolv-2.17.so
:7f70e2d0f000-7f70e2d10000 r--p 00016000 fd:00 63905 /usr/lib64/libresolv-2.17.so
:7f70e2d10000-7f70e2d11000 rw-p 00017000 fd:00 63905 /usr/lib64/libresolv-2.17.so
:7f70e2d11000-7f70e2d13000 rw-p 00000000 00:00 0
:7f70e2d13000-7f70e2d59000 r-xp 00000000 fd:00 829989 /usr/lib64/libevent-2.0.so.5.1.9
:7f70e2d59000-7f70e2f58000 ---p 00046000 fd:00 829989 /usr/lib64/libevent-2.0.so.5.1.9
:7f70e2f58000-7f70e2f59000 r--p 00045000 fd:00 829989 /usr/lib64/libevent-2.0.so.5.1.9
:7f70e2f59000-7f70e2f5a000 rw-p 00046000 fd:00 829989 /usr/lib64/libevent-2.0.so.5.1.9
:7f70e2f5a000-7f70e2f5b000 rw-p 00000000 00:00 0
:7f70e2f5b000-7f70e2f80000 r-xp 00000000 fd:00 64320 /usr/lib64/libtinfo.so.5.9
:7f70e2f80000-7f70e3180000 ---p 00025000 fd:00 64320 /usr/lib64/libtinfo.so.5.9
:7f70e3180000-7f70e3184000 r--p 00025000 fd:00 64320 /usr/lib64/libtinfo.so.5.9
:7f70e3184000-7f70e3185000 rw-p 00029000 fd:00 64320 /usr/lib64/libtinfo.so.5.9
:7f70e3185000-7f70e31ab000 r-xp 00000000 fd:00 64310 /usr/lib64/libncurses.so.5.9
:7f70e31ab000-7f70e33aa000 ---p 00026000 fd:00 64310 /usr/lib64/libncurses.so.5.9
:7f70e33aa000-7f70e33ab000 r--p 00025000 fd:00 64310 /usr/lib64/libncurses.so.5.9
:7f70e33ab000-7f70e33ac000 rw-p 00026000 fd:00 64310 /usr/lib64/libncurses.so.5.9
:7f70e33ac000-7f70e33ae000 r-xp 00000000 fd:00 63914 /usr/lib64/libutil-2.17.so
:7f70e33ae000-7f70e35ad000 ---p 00002000 fd:00 63914 /usr/lib64/libutil-2.17.so
:7f70e35ad000-7f70e35ae000 r--p 00001000 fd:00 63914 /usr/lib64/libutil-2.17.so
:7f70e35ae000-7f70e35af000 rw-p 00002000 fd:00 63914 /usr/lib64/libutil-2.17.so
:7f70e35af000-7f70e35d1000 r-xp 00000000 fd:00 63638 /usr/lib64/ld-2.17.so
:7f70e37af000-7f70e37b5000 rw-p 00000000 00:00 0
:7f70e37cf000-7f70e37d0000 rw-p 00000000 00:00 0
:7f70e37d0000-7f70e37d1000 r--p 00021000 fd:00 63638 /usr/lib64/ld-2.17.so
:7f70e37d1000-7f70e37d2000 rw-p 00022000 fd:00 63638 /usr/lib64/ld-2.17.so
:7f70e37d2000-7f70e37d3000 rw-p 00000000 00:00 0
:7fffb2d00000-7fffb2d21000 rw-p 00000000 00:00 0 [stack]
:7fffb2d53000-7fffb2d55000 r-xp 00000000 00:00 0 [vdso]
:ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall]
open_fds:
:0:/dev/null
:pos: 0
:flags: 0100002
:mnt_id: 20
:1:/dev/null
:pos: 0
:flags: 0100002
:mnt_id: 20
:2:/dev/null
:pos: 0
:flags: 0100002
:mnt_id: 20
:3:anon_inode:[eventpoll]
:pos: 0
:flags: 02000002
:mnt_id: 10
:tfd: 6 events: 1d data: 6
:tfd: 11 events: 1d data: b
:tfd: 10 events: 19 data: a
:tfd: 7 events: 19 data: 7
:tfd: 5 events: 19 data: 5
:tfd: 9 events: 19 data: 9
:4:socket:[84903]
:pos: 0
:flags: 02004002
:mnt_id: 7
:5:socket:[84904]
:pos: 0
:flags: 02004002
:mnt_id: 7
:6:socket:[994338]
:pos: 0
:flags: 04002
:mnt_id: 7
:7:socket:[84905]
:pos: 0
:flags: 04002
:mnt_id: 7
os_info:
:NAME="Springdale Linux"
:VERSION="7.9 (Verona)"
:ID="rhel"
:ID_LIKE="fedora"
:VERSION_ID="7.9"
:PRETTY_NAME="Springdale Linux 7.9 (Verona)"
:ANSI_COLOR="0;32"
:CPE_NAME="cpe:/o:springdale:linux:7.9:GA"
:HOME_URL="http://springdale.princeton.edu/"
:BUG_REPORT_URL="https://springdale.math.ias.edu/"
:
:REDHAT_BUGZILLA_PRODUCT="Springdale Linux 7"
:REDHAT_BUGZILLA_PRODUCT_VERSION=7.9
:REDHAT_SUPPORT_PRODUCT="Springdale Linux"
:REDHAT_SUPPORT_PRODUCT_VERSION=7.9
proc_pid_status:
:Name: tmux
:Umask: 0002
:State: S (sleeping)
:Tgid: 65807
:Ngid: 0
:Pid: 65807
:PPid: 1
:TracerPid: 0
:Uid: 1354 1354 1354 1354
:Gid: 1354 1354 1354 1354
:FDSize: 64
:Groups: 1354
:VmPeak: 23620 kB
:VmSize: 23616 kB
:VmLck: 0 kB
:VmPin: 0 kB
:VmHWM: 3052 kB
:VmRSS: 3052 kB
:RssAnon: 1764 kB
:RssFile: 1288 kB
:RssShmem: 0 kB
:VmData: 1796 kB
:VmStk: 132 kB
:VmExe: 392 kB
:VmLib: 2768 kB
:VmPTE: 68 kB
:VmSwap: 0 kB
:Threads: 1
:SigQ: 0/767488
:SigPnd: 0000000000000000
:ShdPnd: 0000000000000000
:SigBlk: 0000000000000000
:SigIgn: 0000000000081802
:SigCgt: 0000000188034201
:CapInh: 0000000000000000
:CapPrm: 0000000000000000
:CapEff: 0000000000000000
:CapBnd: 0000001fffffffff
:CapAmb: 0000000000000000
:NoNewPrivs: 0
:Seccomp: 0
:Speculation_Store_Bypass: thread vulnerable
:Cpus_allowed: ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff,ffffffff
:Cpus_allowed_list: 0-255
:Mems_allowed: 00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000003
:Mems_allowed_list: 0-1
:voluntary_ctxt_switches: 95924
:nonvoluntary_ctxt_switches: 355
var_log_messages:
:[System Logs]:
:Dec 08 22:41:57 gpu10.int.autonlab.org kernel: tmux[65807]: segfault at 2f3c3f0 ip 00007f70e28825d2 sp 00007fffb2d1a8e8 error 6 in libc-2.17.so[7f70e272b000+1c4000]
:Dec 08 22:41:57 gpu10.int.autonlab.org abrt-hook-ccpp[158008]: Process 65807 (tmux) of user 1354 killed by SIGSEGV - dumping core
:[User Logs]:
More information about the Autonlab-sysinfo
mailing list