|
KASAN: use-after-free Read in compute_effective_progs (2)
|
19 |
syz, C |
error |
|
11 |
1460d |
1587d
|
2/2 |
never |
3527e3cbb84d
bpf: Fix KASAN use-after-free Read in compute_effective_progs
|
|
kernel BUG in ext4_write_inline_data_end (2)
|
-1 |
syz, C |
error |
|
23 |
47d |
1502d
|
2/2 |
never |
f87c7a4b084a
ext4: fix race condition between ext4_write and ext4_convert_inline_data
|
|
BUG: corrupted list in insert_work
|
8 |
syz, C |
done |
done |
9 |
1483d |
1583d
|
2/2 |
never |
d007f49ab789
percpu_ref_init(): clean ->percpu_count_ref on failure
|
|
BUG: corrupted list in process_one_work
|
19 |
syz, C |
error |
done |
35 |
382d |
1580d
|
2/2 |
never |
d007f49ab789
percpu_ref_init(): clean ->percpu_count_ref on failure
|
|
kernel BUG in tun_attach
|
-1 |
syz, C |
error |
|
31 |
1470d |
1512d
|
2/2 |
never |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
KASAN: slab-out-of-bounds Read in exfat_clear_bitmap
|
17 |
syz, C |
error |
|
2 |
1573d |
1573d
|
2/2 |
never |
82f723b8a5ad
exfat: check if cluster num is valid
|
|
KASAN: use-after-free Read in free_netdev
|
19 |
syz, C |
error |
|
2 |
1480d |
1512d
|
2/2 |
never |
3b9bc84d3111
net: tun: unlink NAPI from device on destruction
|
|
kernel BUG in ext4_mb_find_by_goal
|
-1 |
syz, C |
error |
done |
31 |
1137d |
1178d
|
2/2 |
1087d |
100c0ad6c045
ext4: allow ext4_get_group_info() to fail
|
|
general protection fault in chrdev_open
|
2 |
syz, C |
error |
|
1 |
1522d |
1521d
|
2/2 |
1101d |
b577d0cd2104
9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"
|
|
kernel BUG in end_page_writeback
f2fs
|
-1 |
syz, C |
error |
inconclusive |
3 |
1227d |
1278d
|
2/2 |
1135d |
5cdb422c8391
f2fs: fix to avoid use-after-free for cached IPU bio
|
|
kernel BUG in cdc_ncm_fill_tx_frame (2)
|
-1 |
syz, C |
error |
|
3 |
1179d |
1187d
|
2/2 |
1137d |
42b78c8cc774
net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
|
|
kernel BUG in kvfree
|
-1 |
syz, C |
done |
|
1 |
1189d |
1189d
|
2/2 |
1151d |
1a8822343e67
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
|
KASAN: slab-out-of-bounds Read in ext4_group_desc_csum
ext4
|
19 |
syz, C |
error |
inconclusive |
11 |
1160d |
1262d
|
2/2 |
1151d |
0dde3141c527
ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
|
|
general protection fault in ext4_xattr_set_entry (5)
|
2 |
syz, C |
done |
|
11 |
1154d |
1156d
|
2/2 |
1152d |
67d7d8ad99be
ext4: fix use-after-free in ext4_xattr_set_entry
|
|
KASAN: slab-out-of-bounds Read in get_max_inline_xattr_value_size
ext4
|
19 |
syz, C |
error |
|
4 |
1230d |
1309d
|
2/2 |
1157d |
eee22187b536
ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
|
|
general protection fault in ext4_xattr_set_entry (4)
|
2 |
syz, C |
error |
|
62 |
1157d |
1186d
|
2/2 |
1157d |
67d7d8ad99be
ext4: fix use-after-free in ext4_xattr_set_entry
|
|
KASAN: use-after-free Read in ext4_ext_rm_leaf
ext4
|
19 |
syz, C |
error |
inconclusive |
1 |
1294d |
1294d
|
2/2 |
1171d |
eee22187b536
ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop
|
|
KASAN: use-after-free Read in ext4_rename_dir_prepare (3)
|
19 |
syz, C |
error |
|
4 |
1195d |
1195d
|
2/2 |
1187d |
0be698ecbe44
BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
|
|
general protection fault in ext4_xattr_set_entry (3)
|
2 |
syz, C |
error |
|
9 |
1188d |
1191d
|
2/2 |
1187d |
67d7d8ad99be
ext4: fix use-after-free in ext4_xattr_set_entry
|
|
kernel BUG in ext4_write_inline_data
ext4
|
-1 |
syz, C |
error |
inconclusive |
3 |
1272d |
1370d
|
2/2 |
1191d |
5c099c4fdc43
UPSTREAM: ext4: fix kernel BUG in 'ext4_write_inline_data_end()'
|
|
kernel BUG in __skb_gso_segment
|
-1 |
syz, C |
error |
|
1 |
1332d |
1332d
|
2/2 |
1191d |
e9d3f80935b6
net/af_packet: make sure to pull mac header
|
|
general protection fault in em_cmp_match
|
2 |
syz, C |
error |
|
1 |
1336d |
1336d
|
2/2 |
1191d |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
general protection fault in fscrypt_limit_io_blocks
|
2 |
syz, C |
error |
|
5 |
1313d |
1377d
|
2/2 |
1191d |
105c78e12468
ext4: don't allow journal inode to have encrypt flag
|
|
kernel BUG in ext4_free_blocks (2)
ext4
|
-1 |
syz, C |
error |
|
25 |
1194d |
1496d
|
2/2 |
1191d |
beda74302101
UPSTREAM: ext4: block range must be validated before use in ext4_mb_clear_bb()
1e1c2b86ef86
ext4: block range must be validated before use in ext4_mb_clear_bb()
|
|
general protection fault in ext4_xattr_set_entry (2)
ext4
|
2 |
syz, C |
error |
|
423 |
1192d |
1392d
|
2/2 |
1192d |
67d7d8ad99be
ext4: fix use-after-free in ext4_xattr_set_entry
|
|
KASAN: use-after-free Read in ext4_rename_dir_prepare (2)
|
19 |
syz, C |
error |
inconclusive |
3 |
1262d |
1262d
|
2/2 |
1228d |
0be698ecbe44
BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
|
|
kernel BUG in add_grec (2)
|
-1 |
syz, C |
error |
inconclusive |
1039 |
1353d |
1353d
|
2/2 |
1260d |
d89d7ff01235
ipv6: ensure sane device mtu in tunnels
|
|
KASAN: use-after-free Read in ext4_rename_dir_prepare
|
19 |
syz, C |
error |
|
2 |
1323d |
1358d
|
2/2 |
1298d |
0be698ecbe44
BACKPORT: ext4: fix use-after-free in ext4_rename_dir_prepare
|
|
kernel BUG in ext4_writepages
|
-1 |
syz, C |
error |
|
5 |
1389d |
1551d
|
2/2 |
1360d |
4bb26f2885ac
ext4: avoid crash when inline data creation follows DIO write
|
|
KASAN: use-after-free Read in gc_data_segment
|
19 |
syz, C |
error |
|
4 |
1363d |
1387d
|
2/2 |
1360d |
c6ad7fd16657
f2fs: fix to do sanity check on summary info
|
|
KASAN: use-after-free Read in mon_bin_flush
|
19 |
syz, C |
error |
|
2 |
1420d |
1421d
|
2/2 |
1389d |
a659daf63d16
usb: mon: make mmapped memory read only
|
|
kernel BUG in notify_change (3)
|
-1 |
syz, C |
error |
|
2 |
1446d |
1446d
|
2/2 |
1404d |
bcf6dddd9746
ANDROID: incfs: Add check for ATTR_KILL_SUID and ATTR_MODE in incfs_setattr
|
|
kernel BUG in ext4_ind_remove_space
|
-1 |
syz, C |
error |
|
55 |
1549d |
1660d
|
2/2 |
1548d |
22c450d39f89
ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
|
|
kernel BUG in vhost_get_vq_desc
|
-1 |
syz, C |
error |
done |
19 |
1608d |
1652d
|
2/2 |
1548d |
698dc7d13c4e
vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
|
|
BUG: stack guard page was hit in sys_open (5)
|
-1 |
|
|
|
4 |
1562d |
1567d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_lsetxattr (2)
|
-1 |
|
|
|
2 |
1618d |
1621d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
general protection fault in incfs_kill_sb
|
2 |
syz, C |
done |
|
380 |
1624d |
1626d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in security_file_open
|
-1 |
|
|
|
2 |
1567d |
1619d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_mkdirat
|
-1 |
syz |
error |
|
3 |
1549d |
1583d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_chmod
|
-1 |
|
|
|
1 |
1594d |
1594d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_chown
|
-1 |
|
|
|
2 |
1578d |
1613d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_mknodat
|
-1 |
|
|
|
1 |
1576d |
1576d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_chdir (4)
|
-1 |
|
|
|
1 |
1590d |
1590d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_unlink (8)
|
-1 |
|
|
|
1 |
1589d |
1589d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
BUG: stack guard page was hit in sys_listxattr
|
-1 |
|
|
|
1 |
1588d |
1588d
|
2/2 |
1548d |
3e45af8a72c0
ANDROID: incremental-fs: limit mount stack depth
|
|
kernel BUG in mpage_prepare_extent_to_map
|
-1 |
syz, C |
error |
|
254 |
1571d |
1739d
|
2/2 |
1569d |
330d0e44fc5a
ext4: don't BUG if someone dirty pages without asking ext4 first
|
|
KASAN: use-after-free Write in paging64_update_accessed_dirty_bits
|
22 |
syz, C |
error |
|
16 |
1626d |
1735d
|
2/2 |
1569d |
e90518d10c7d
KVM: x86/mmu: do compare-and-exchange of gPTE via the user address
|
|
kernel BUG in add_grec
|
-1 |
syz, C |
error |
|
83 |
1593d |
1667d
|
2/2 |
1592d |
ae8ec5eabb1a
net: ipv6: fix skb_over_panic in __ip6_append_data
|
|
kernel BUG in iput
|
-1 |
syz, C |
error |
|
2 |
1601d |
1601d
|
2/2 |
1592d |
839a534f1e85
exfat: avoid incorrectly releasing for root inode
|
|
KASAN: slab-out-of-bounds Read in packet_recvmsg
|
17 |
syz, C |
error |
|
1 |
1609d |
1609d
|
2/2 |
1598d |
c700525fcc06
net/packet: fix slab-out-of-bounds access in packet_recvmsg()
|
|
KASAN: use-after-free Write in null_skcipher_crypt
|
22 |
|
|
|
1 |
1659d |
1659d
|
2/2 |
1598d |
ebe48d368e97
esp: Fix possible buffer overflow in ESP transformation
|
|
BUG: stack guard page was hit in file_open
|
-1 |
syz, C |
error |
|
25 |
1616d |
1694d
|
2/2 |
1616d |
6f915dd2af92
ANDROID: incremental-fs: remove index and incomplete dir on umount
|
|
kernel BUG in notify_change
|
-1 |
syz, C |
error |
|
3 |
1632d |
1692d
|
2/2 |
1616d |
6f915dd2af92
ANDROID: incremental-fs: remove index and incomplete dir on umount
|
|
KASAN: invalid-free in bitmap_free
|
24 |
syz, C |
error |
done |
1 |
1699d |
1699d
|
2/2 |
1616d |
7da349f07e45
net/packet: rx_owner_map depends on pg_vec
|
|
general protection fault in pending_reads_dispatch_ioctl
|
2 |
syz, C |
error |
|
4 |
1648d |
1680d
|
2/2 |
1624d |
4b1862e4fc69
ANDROID: incremental-fs: fix GPF in pending_reads_dispatch_ioctl
|
|
KASAN: use-after-free Read in hardware_disable
|
19 |
syz, C |
error |
done |
5 |
1655d |
1658d
|
2/2 |
1624d |
080dbe7e9b86
KVM: x86: Forcibly leave nested virt when SMM state is toggled
|
|
BUG: Dentry still in use in unmount
|
-1 |
syz, C |
done |
|
1184 |
1626d |
1639d
|
2/2 |
1625d |
6f915dd2af92
ANDROID: incremental-fs: remove index and incomplete dir on umount
|
|
general protection fault in reweight_entity
|
2 |
syz, C |
done |
|
2 |
1636d |
1694d
|
1/2 |
1626d |
13765de8148f
BACKPORT: sched/fair: Fix fault in reweight_entity
|
|
kernel BUG in kvm_mmu_notifier_invalidate_range_end
|
-1 |
syz, C |
error |
done |
167 |
1663d |
1750d
|
1/2 |
1626d |
2fc2c66b9ce4
ANDROID: percpu-rwsem: enable percpu_sem destruction in atomic context
|
|
general protection fault in tipc_crypto_key_distr
|
2 |
|
|
|
1 |
1735d |
1735d
|
1/2 |
1646d |
3e6db079751a
tipc: check for null after calling kmemdup
|
|
KASAN: slab-out-of-bounds Write in legacy_parse_param
|
21 |
syz, C |
error |
|
1 |
1680d |
1680d
|
1/2 |
1653d |
722d94847de2
vfs: fs_context: fix up param length parsing in legacy_parse_param
|
|
kernel BUG in cdc_ncm_fill_tx_frame
|
-1 |
syz, C |
error |
|
40 |
1685d |
1751d
|
1/2 |
1682d |
2be6d4d16a08
net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
|
|
general protection fault in klist_iter_exit
|
2 |
syz, C |
error |
|
5 |
1700d |
1736d
|
1/2 |
1691d |
c602863ad28e
nfc: fix segfault in nfc_genl_dump_devices_done
|
|
KASAN: null-ptr-deref Write in prepare_to_wait
|
12 |
syz, C |
error |
|
2 |
1743d |
1743d
|
1/2 |
1710d |
748786564a35
Revert "io_uring: reinforce cancel on flush during exit"
|
|
general protection fault in scsi_queue_rq
|
2 |
syz, C |
error |
|
3 |
1718d |
1743d
|
1/2 |
1710d |
06cc8187dbb6
scsi: core: Remove command size deduction from scsi_setup_scsi_cmnd()
|
|
BUG: Dentry still in use [unmount of ramfs ramfs]
|
-1 |
syz, C |
error |
|
3 |
1749d |
1751d
|
1/2 |
1710d |
df4c5491ab63
ANDROID: Incremental fs: Fix dentry get/put imbalance on vfs_mkdir() failure
|
|
KASAN: use-after-free Write in ext4_stop_mmpd
|
22 |
syz, C |
done |
|
3 |
1746d |
1748d
|
1/2 |
1732d |
61bb4a1c417e
ext4: fix possible UAF when remounting r/o a mmp-protected file system
|
|
divide error in genelink_tx_fixup
|
2 |
syz, C |
error |
|
8 |
1743d |
1748d
|
1/2 |
1732d |
6f7c88691191
usbnet: fix error return code in usbnet_probe()
|
|
KASAN: invalid-free in io_commit_cqring
|
24 |
syz, C |
error |
|
3 |
1738d |
1749d
|
1/2 |
1737d |
3f2c12ec8a3f
io_uring: don't take uring_lock during iowq cancel
|