Applied filters: WithRepro (drop)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Closed Patch
kernel BUG at drivers/android/binder_alloc.c:LINE! -1 syz, C 44 2525d 2773d 1/3 never 5997da82145b FROMGIT: binder: fix BUG_ON found by selinux-testsuite
possible deadlock in seq_read 4 syz, C 56124 2520d 2756d 1/3 never 73601ea5b7b1 fs/open.c: allow opening only regular files during execve()
general protection fault in sg_remove_scat 2 syz, C 279 3133d 3315d 3/3 2951d 48ae8484e9fc scsi: sg: don't return bogus Sg_requests
KASAN: stack-out-of-bounds Read in xt_copy_counters_from_user 17 syz, C 18 2961d 2967d 3/3 2952d e466af75c074 netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user
general protection fault in sockfs_setattr 2 syz, C 11 2989d 3007d 3/3 2988d 6d8c50dcb029 UPSTREAM: socket: close race condition between sock_close() and sockfs_setattr()
BUG: unable to handle kernel paging request in page_remove_rmap 8 syz, C 14617 2989d 2996d 3/3 2989d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in copy_huge_pmd 8 syz, C 433 2989d 2996d 3/3 2989d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
BUG: unable to handle kernel paging request in __split_huge_pmd 8 syz, C 174 2989d 2996d 3/3 2989d fd7e315988b7 x86/mm: Simplify p[g4um]d_page() macros
KASAN: use-after-free Read in __list_del_entry (3) 19 syz, C 9 3152d 3159d 3/3 3068d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
KASAN: use-after-free Read in binder_release_work 19 syz, C 132 3108d 3122d 3/3 3081d 7aa135fcf263 UPSTREAM: ANDROID: binder: prevent transactions into own process.
WARNING in set_precision -1 syz, C 1320 3101d 3223d 3/3 3101d 9c438d7a3a52 KEYS: DNS: limit the length of option strings
possible deadlock in __might_fault 4 syz, C 10264 3145d 3166d 3/3 3109d 740a5759bf22 staging: android: ashmem: Fix possible deadlock in ashmem_ioctl
BUG: using __this_cpu_read() in preemptible code in ipcomp_init_state 4 syz, C 304159 3124d 3242d 2/3 3123d 0dcd7876029b net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()
WARNING in binder_send_failed_reply -1 syz, C 74 3158d 3257d 2/3 3156d e46a3b3ba750 UPSTREAM: ANDROID: binder: remove WARN() for redundant txn error
KASAN: use-after-free Read in remove_wait_queue 19 syz, C 6 3171d 3181d 2/3 3159d 5eeb2ca02a2f ANDROID: binder: synchronize_rcu() when using POLLFREE.
WARNING in __alloc_pages_slowpath (3) -1 syz, C 547 3161d 3165d 2/3 3161d f67385227a42 ANDROID: keychord: Check for write data size
KASAN: double-free or invalid-free in relay_open 24 syz, C 64 3175d 3226d 2/3 3172d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
BUG: Double free or freeing an invalid pointer (2) -1 syz, C 1 3247d 3247d 2/3 3172d a1be1f3931bf kernel/relay.c: revert "kernel/relay.c: fix potential memory leak"
KASAN: use-after-free Read in __lock_acquire 19 syz, C 1161 3186d 3257d 2/3 3178d f5cb779ba163 UPSTREAM: ANDROID: binder: remove waitqueue when thread exits.
BUG: bad unlock balance in ipmr_mfc_seq_stop 4 syz, C 7493 3179d 3257d 2/3 3178d 4adfa79fc254 ip6mr: fix stale iterator
WARNING in task_participate_group_stop -1 syz, C 15 3213d 3370d 2/3 3186d 426915796cca kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
kernel BUG at net/key/af_key.c:LINE! -1 syz, C 1 3349d 3349d 2/3 3189d 0e74aa1d79a5 xfrm: Copy policy family in clone_policy
BUG: unable to handle kernel paging request in snd_seq_oss_readq_puts 8 syz, C 3 3327d 3326d 2/3 3227d 132d358b183a ALSA: seq: Fix OSS sysex delivery in OSS emulation
KASAN: stack-out-of-bounds Read in memcmp 17 syz, C 4 3372d 3376d 1/3 3252d 4c86d77743a5 BACKPORT: xfrm: Don't use sk_family for socket policy lookups
WARNING in reuseport_alloc -1 syz, C 106 3266d 3295d 1/3 3256d 1b5f962e71bf soreuseport: fix initialization race
WARNING in skb_warn_bad_offload -1 syz, C 442 3277d 3384d 1/3 3277d net: remove open-coded skb_cow_head.
KASAN: use-after-free Read in fanout_demux_rollover 19 syz, C 5 3319d 3340d 1/3 3278d 008ba2a13f2d packet: hold bind lock when rebinding to fanout hook
WARNING in __alloc_pages_slowpath -1 syz, C 2412 3283d 3358d 1/3 3283d 7682e399485f FROMLIST: ALSA: usx2y: Suppress kernel warning at page allocation failures
KASAN: use-after-free Read in bio_copy_user_iov 19 syz 73 3346d 3376d 1/3 3292d 1bc0eb044615 scsi: sg: protect accesses to 'reserved' page array
BUG: sleeping function called from invalid context at mm/slab.h:LINE -1 syz, C 3 3369d 3382d 1/3 3292d 89e357d83c06 af_key: Add lock to key dump
BUG: unable to handle kernel NULL pointer dereference in __remove_shared_vm_struct 10 syz, C 1 3355d 3353d 1/3 3292d 2b7e8665b4ff fork: fix incorrect fput of ->exe_file causing use-after-free
WARNING in __switch_to -1 syz, C 54 3311d 3379d 1/3 3292d 814fb7bb7db5 x86/fpu: Don't let userspace set bogus xcomp_bv
KASAN: use-after-free Read in parse_ipsecrequests 19 syz, C 7 3383d 3384d 1/3 3353d 096f41d3a8fc UPSTREAM: af_key: Fix sadb_x_ipsecrequest parsing
WARNING in __list_add -1 syz, C 11 3366d 3379d 1/3 3364d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
BUG: Double free or freeing an invalid pointer -1 syz 70 3365d 3383d 1/3 3364d 59584701f1e2 ANDROID: keychord: Fix races in keychord_write.
KASAN: slab-out-of-bounds Read in keychord_write 17 syz 2 3385d 3384d 1/3 3379d 913d980e07d8 ANDROID: keychord: Fix a slab out-of-bounds read.