Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
kernel BUG at drivers/android/binder_alloc.c:LINE! -1 syz, C 44 2464d 2712d 1/3 never 5997da82145b FROMGIT: binder: fix BUG_ON found by selinux-testsuite
possible deadlock in seq_read 4 syz, C 56124 2460d 2696d 1/3 never 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
general protection fault in sg_remove_scat 2 syz, C 279 3072d 3255d 3/3 2890d 48ae8484e9fc scsi: sg: don't return bogus Sg_requests
KASAN: stack-out-of-bounds Read in xt_copy_counters_from_user 17 syz, C 18 2900d 2906d 3/3 2892d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
general protection fault in sockfs_setattr 2 syz, C 11 2928d 2946d 3/3 2927d 6d8c50dcb029 UPSTREAM: socket: close race condition between sock_close() and sockfs_setattr()
BUG: unable to handle kernel paging request in page_remove_rmap 8 syz, C 14617 2929d 2935d 3/3 2929d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in copy_huge_pmd 8 syz, C 433 2929d 2935d 3/3 2929d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in __split_huge_pmd 8 syz, C 174 2929d 2935d 3/3 2929d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
KASAN: use-after-free Read in __list_del_entry (3) 19 syz, C 9 3091d 3098d 3/3 3007d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
KASAN: use-after-free Read in binder_release_work 19 syz, C 132 3047d 3061d 3/3 3020d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
WARNING in set_precision -1 syz, C 1320 3041d 3162d 3/3 3041d 9c438d7a3a52 KEYS: DNS: limit the length of option strings
possible deadlock in __might_fault 4 syz, C 10264 3084d 3105d 3/3 3048d 740a5759bf22 staging: android: ashmem: Fix possible deadlock in ashmem_ioctl
BUG: using __this_cpu_read() in preemptible code in ipcomp_init_state 4 syz, C 304159 3063d 3181d 2/3 3062d 0dcd7876029b net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
WARNING in binder_send_failed_reply -1 syz, C 74 3098d 3196d 2/3 3096d e46a3b3ba750 UPSTREAM: ANDROID: binder: remove WARN() for redundant txn error
KASAN: use-after-free Read in remove_wait_queue 19 syz, C 6 3110d 3120d 2/3 3098d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
WARNING in __alloc_pages_slowpath (3) -1 syz, C 547 3100d 3104d 2/3 3100d f67385227a42 ANDROID: keychord: Check for write data size
KASAN: double-free or invalid-free in relay_open 24 syz, C 64 3115d 3166d 2/3 3111d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
BUG: Double free or freeing an invalid pointer (2) -1 syz, C 1 3187d 3187d 2/3 3111d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
KASAN: use-after-free Read in __lock_acquire 19 syz, C 1161 3125d 3196d 2/3 3118d f5cb779ba163 UPSTREAM: ANDROID: binder: remove waitqueue when thread exits.
BUG: bad unlock balance in ipmr_mfc_seq_stop 4 syz, C 7493 3118d 3196d 2/3 3118d 4adfa79fc254 ip6mr: fix stale iterator
WARNING in task_participate_group_stop -1 syz, C 15 3152d 3309d 2/3 3125d 426915796cca kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
kernel BUG at net/key/af_key.c:LINE! -1 syz, C 1 3288d 3288d 2/3 3129d 0e74aa1d79a5 xfrm: Copy policy family in clone_policy
BUG: unable to handle kernel paging request in snd_seq_oss_readq_puts 8 syz, C 3 3266d 3265d 2/3 3166d 132d358b183a ALSA: seq: Fix OSS sysex delivery in OSS emulation
KASAN: stack-out-of-bounds Read in memcmp 17 syz, C 4 3312d 3315d 1/3 3192d 4c86d77743a5 BACKPORT: xfrm: Don't use sk_family for socket policy lookups
WARNING in reuseport_alloc -1 syz, C 106 3205d 3235d 1/3 3196d 1b5f962e71bf soreuseport: fix initialization race
WARNING in skb_warn_bad_offload -1 syz, C 442 3216d 3323d 1/3 3216d net: remove open-coded skb_cow_head.
KASAN: use-after-free Read in fanout_demux_rollover 19 syz, C 5 3259d 3279d 1/3 3217d 008ba2a13f2d packet: hold bind lock when rebinding to fanout hook
WARNING in __alloc_pages_slowpath -1 syz, C 2412 3222d 3297d 1/3 3222d 7682e399485f FROMLIST: ALSA: usx2y: Suppress kernel warning at page allocation failures
KASAN: use-after-free Read in bio_copy_user_iov 19 syz 73 3285d 3315d 1/3 3231d 1bc0eb044615 scsi: sg: protect accesses to 'reserved' page array
BUG: sleeping function called from invalid context at mm/slab.h:LINE -1 syz, C 3 3308d 3321d 1/3 3231d 89e357d83c06 af_key: Add lock to key dump
BUG: unable to handle kernel NULL pointer dereference in __remove_shared_vm_struct 10 syz, C 1 3294d 3293d 1/3 3231d 2b7e8665b4ff fork: fix incorrect fput of ->exe_file causing use-after-free
WARNING in __switch_to -1 syz, C 54 3250d 3318d 1/3 3231d 814fb7bb7db5 x86/fpu: Don't let userspace set bogus xcomp_bv
KASAN: use-after-free Read in parse_ipsecrequests 19 syz, C 7 3323d 3323d 1/3 3292d 096f41d3a8fc UPSTREAM: af_key: Fix sadb_x_ipsecrequest parsing
WARNING in __list_add -1 syz, C 11 3305d 3319d 1/3 3303d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
BUG: Double free or freeing an invalid pointer -1 syz 70 3305d 3322d 1/3 3303d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
KASAN: slab-out-of-bounds Read in keychord_write 17 syz 2 3325d 3323d 1/3 3318d 913d980e07d8 ANDROID: keychord: Fix a slab out-of-bounds read.