|
general protection fault in em_cmp_match
|
2 |
C |
|
|
1 |
1203d |
1203d
|
0/1 |
never |
9cd3fd2054c3
net_sched: reject TCF_EM_SIMPLE case for complex ematch module
|
|
KASAN: use-after-free Read in tc_chain_fill_node
|
19 |
C |
|
|
1031 |
1123d |
2367d
|
0/1 |
never |
6f99528e9797
net: core: netlink: add helper refcount dec and lock function
9d7e82cec35c
net: sched: add helper function to take reference to Qdisc
3a7d0d07a386
net: sched: extend Qdisc with rcu
86bd446b5ceb
net: sched: rename qdisc_destroy() to qdisc_put()
e368fdb61d8e
net: sched: use Qdisc rcu API instead of relying on rtnl lock
|
|
KASAN: use-after-free Read in skb_dequeue (2)
|
19 |
C |
|
done |
2 |
1659d |
1689d
|
1/1 |
1628d |
bb2853a6a421
tty: Fix data race between tiocsti() and flush_to_ldisc()
|
|
KASAN: use-after-free Read in ext4_xattr_set_entry (2)
|
19 |
C |
|
done |
7 |
1661d |
2119d
|
1/1 |
1631d |
a54c4613dac1
ext4: fix race writing to an inline_data file while its xattrs are changing
|
|
inconsistent lock state in sco_sock_timeout
|
4 |
C |
|
done |
19 |
1662d |
2052d
|
1/1 |
1631d |
ba316be1b6a0
Bluetooth: schedule SCO timeouts with delayed_work
|
|
BUG: sleeping function called from invalid context in lock_sock_nested (2)
|
5 |
C |
|
done |
3909 |
1662d |
1755d
|
1/1 |
1631d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
KASAN: slab-out-of-bounds Write in ext4_write_inline_data
|
22 |
C |
|
done |
3 |
1667d |
1874d
|
1/1 |
1637d |
a54c4613dac1
ext4: fix race writing to an inline_data file while its xattrs are changing
|
|
BUG: soft lockup in tx
|
1 |
C |
|
done |
1 |
1670d |
1700d
|
1/1 |
1640d |
c7c5e6ff533f
fq_codel: reject silly quantum parameters
|
|
BUG: corrupted list in kobject_add_internal
|
8 |
C |
|
done |
2 |
1674d |
1922d
|
1/1 |
1644d |
734bc5ff7831
Bluetooth: avoid circular locks in sco_sock_connect
|
|
kernel BUG in kvm_hv_set_msr_common
|
-1 |
syz |
|
done |
2 |
1675d |
1705d
|
1/1 |
1644d |
8750e72a79dd
KVM: remember position in kvm->vcpus array
|
|
BUG: unable to handle kernel paging request in do_syscall_64
|
8 |
C |
|
done |
3 |
1680d |
2199d
|
1/1 |
1647d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
general protection fault in do_syscall_64 (2)
|
2 |
syz |
|
done |
2 |
1679d |
2012d
|
1/1 |
1647d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
KASAN: use-after-free Read in ip_check_mc_rcu
|
19 |
syz |
|
done |
7 |
1681d |
1832d
|
1/1 |
1647d |
23d2b94043ca
igmp: Add ip_mc_list lock in ip_check_mc_rcu
|
|
KASAN: slab-out-of-bounds Write in decode_data
|
21 |
C |
|
done |
1 |
1682d |
2229d
|
1/1 |
1651d |
19d1532a1876
net: 6pack: fix slab-out-of-bounds in decode_data
|
|
INFO: task hung in do_fb_ioctl (2)
|
1 |
C |
|
done |
7 |
1683d |
2098d
|
1/1 |
1652d |
a49145acfb97
fbmem: add margin check to fb_check_caps()
|
|
BUG: unable to handle kernel paging request in do_csum
|
8 |
C |
|
done |
1 |
1683d |
1902d
|
1/1 |
1652d |
1d011c4803c7
ip_gre: add validation for csum_start
|
|
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow (2)
|
10 |
C |
|
done |
15 |
1692d |
1816d
|
1/1 |
1660d |
2acf15b94d5b
reiserfs: add check for root_inode in reiserfs_fill_super
|
|
KASAN: use-after-free Read in search_by_entry_key (2)
|
19 |
C |
|
done |
2 |
1693d |
1843d
|
1/1 |
1663d |
2acf15b94d5b
reiserfs: add check for root_inode in reiserfs_fill_super
|
|
KASAN: use-after-free Read in __queue_work
|
19 |
syz |
|
done |
5 |
1695d |
2067d
|
1/1 |
1664d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
WARNING in close_fs_devices
|
-1 |
C |
|
done |
105 |
1705d |
2023d
|
1/1 |
1674d |
f267aeb6dea5
ocfs2: fix zero out valid data
|
|
possible deadlock in cleanup_net
|
4 |
C |
|
done |
5212 |
1705d |
1967d
|
1/1 |
1674d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
possible deadlock in __sock_release
|
4 |
C |
|
done |
57446 |
1705d |
1967d
|
1/1 |
1674d |
4694ae373dc2
PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
|
|
KASAN: use-after-free Write in hci_sock_bind
|
22 |
C |
|
done |
12 |
1711d |
2271d
|
1/1 |
1678d |
e04480920d1e
Bluetooth: defer cleanup of resources in hci_unregister_dev()
|
|
kernel BUG at drivers/dma-buf/dma-buf.c:LINE!
|
-1 |
syz |
|
done |
1 |
1709d |
2192d
|
1/1 |
1678d |
3abab27c322e
drm: Return -ENOTTY for non-drm ioctls
|
|
unexpected kernel reboot
|
-1 |
C |
|
done |
684 |
1718d |
2494d
|
1/1 |
1687d |
b97f07458373
KVM: x86: determine if an exception has an error code only when injecting it.
|
|
KASAN: use-after-free Read in reservation_object_test_signaled_rcu
|
19 |
C |
|
done |
4 |
1718d |
1953d
|
1/1 |
1687d |
3abab27c322e
drm: Return -ENOTTY for non-drm ioctls
|
|
BUG: unable to handle kernel paging request in diFree
|
8 |
C |
|
done |
18 |
1718d |
2010d
|
1/1 |
1688d |
9d574f985fe3
jfs: fix GPF in diFree
|
|
KASAN: use-after-free Read in hci_chan_del
|
19 |
C |
|
done |
24 |
1721d |
2067d
|
1/1 |
1689d |
e2cb6b891ad2
bluetooth: eliminate the potential race condition when removing the HCI controller
|
|
WARNING in drm_prime_destroy_file_private
|
-1 |
syz |
|
done |
6 |
1720d |
1911d
|
1/1 |
1689d |
3abab27c322e
drm: Return -ENOTTY for non-drm ioctls
|
|
divide error in do_journal_end (2)
|
2 |
C |
|
done |
4 |
1724d |
1835d
|
1/1 |
1692d |
a149127be52f
reiserfs: add check for invalid 1st journal block
|
|
general protection fault in mount_fs
|
2 |
C |
|
done |
12 |
1724d |
1955d
|
1/1 |
1692d |
8f6840c4fd1e
ext4: return error code when ext4_fill_flex_info() fails
|
|
WARNING: suspicious RCU usage in vxlan_xmit
|
4 |
C |
|
done |
1 |
1728d |
1728d
|
1/1 |
1698d |
85e8b032d6eb
vxlan: add missing rcu_read_lock() in neigh_reduce()
|
|
WARNING in batadv_iv_send_outstanding_bat_ogm_packet
|
-1 |
C |
|
done |
373 |
1735d |
2351d
|
1/1 |
1705d |
9f460ae31c44
batman-adv: Avoid WARN_ON timing related checks
|
|
general protection fault in ieee802154_llsec_parse_dev_addr
|
2 |
C |
|
done |
32 |
1739d |
1858d
|
1/1 |
1708d |
25bdbfbb2d83
HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
|
|
KASAN: use-after-free Read in qfq_search_class
|
19 |
C |
|
done |
2 |
1742d |
2228d
|
1/1 |
1711d |
0cd58e5c53ba
pkt_sched: sch_qfq: fix qfq_change_class() error path
|
|
KASAN: use-after-free Read in ntfs_iget (2)
|
19 |
C |
|
done |
1 |
1743d |
1743d
|
1/1 |
1713d |
d98e4d95411b
ntfs: fix validity check for file name attribute
|
|
WARNING in sta_apply_parameters
|
-1 |
C |
|
done |
1 |
1744d |
1970d
|
1/1 |
1713d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
WARNING in sta_info_alloc
|
-1 |
C |
|
done |
15 |
1746d |
2003d
|
1/1 |
1716d |
0ee4d55534f8
mac80211: remove warning in ieee80211_get_sband()
|
|
KASAN: null-ptr-deref Write in vhci_shutdown_connection
|
12 |
syz |
|
done |
498 |
1750d |
1931d
|
1/1 |
1716d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
WARNING in process_one_work
|
-1 |
C |
|
done |
9 |
1752d |
2317d
|
1/1 |
1721d |
9f460ae31c44
batman-adv: Avoid WARN_ON timing related checks
|
|
general protection fault in try_to_wake_up
|
2 |
syz |
|
done |
229 |
1752d |
1840d
|
1/1 |
1722d |
8d0caedb7596
can: bcm/raw/isotp: use per module netdevice notifier
|
|
WARNING: ODEBUG bug in slave_kobj_release
|
-1 |
C |
|
done |
28 |
1758d |
1934d
|
1/1 |
1727d |
35d96e631860
bonding: init notify_work earlier to avoid uninitialized use
|
|
KASAN: use-after-free Read in drm_getunique
|
19 |
syz |
|
done |
2 |
1770d |
1938d
|
1/1 |
1740d |
b436acd1cf7f
drm: Fix use-after-free read in drm_getunique()
|
|
BUG: unable to handle kernel NULL pointer dereference in corrupted
|
10 |
C |
|
done |
6 |
1771d |
2353d
|
1/1 |
1741d |
4ac06a1e013c
nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
|
|
KASAN: global-out-of-bounds Read in soft_cursor
|
17 |
C |
|
done |
22 |
1772d |
2239d
|
1/1 |
1742d |
860dafa90259
vt: Fix character height handling with VT_RESIZEX
|
|
KASAN: global-out-of-bounds Read in bit_putcs
|
19 |
C |
|
done |
214 |
1772d |
2309d
|
1/1 |
1742d |
860dafa90259
vt: Fix character height handling with VT_RESIZEX
|
|
WARNING: ODEBUG bug in cancel_delayed_work
|
-1 |
C |
|
done |
1226 |
1775d |
2070d
|
1/1 |
1742d |
3a9d54b1947e
Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
|
|
KASAN: use-after-free Read in hci_send_acl
|
19 |
C |
|
done |
3 |
1776d |
2067d
|
1/1 |
1742d |
5c4c8c954409
Bluetooth: verify AMP hci_chan before amp_destroy
|
|
KASAN: use-after-free Read in nfc_llcp_sock_unlink
|
19 |
C |
|
done |
22 |
1775d |
1813d
|
1/1 |
1742d |
c61760e6940d
net/nfc: fix use-after-free llcp_sock_bind/connect
|
|
WARNING in hsr_addr_subst_dest
|
-1 |
C |
|
done |
3099 |
1775d |
2543d
|
1/1 |
1742d |
4b793acdca00
hsr: use netdev_err() instead of WARN_ONCE()
|
|
KASAN: slab-out-of-bounds Read in soft_cursor (2)
|
17 |
C |
|
done |
8 |
1774d |
1897d
|
1/1 |
1742d |
860dafa90259
vt: Fix character height handling with VT_RESIZEX
|
|
possible deadlock in tty_port_close_start
|
4 |
C |
|
done |
47 |
1780d |
2246d
|
1/1 |
1750d |
c0070e1e6027
ttyprintk: Add TTY hangup callback.
|
|
KASAN: null-ptr-deref Read in llcp_sock_getname
|
11 |
C |
|
|
37 |
1784d |
2344d
|
1/1 |
1755d |
4ac06a1e013c
nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
|
|
kernel BUG in z_erofs_map_blocks_iter
|
-1 |
syz |
|
done |
10 |
1796d |
1857d
|
1/1 |
1766d |
24a806d849c0
erofs: add unsupported inode i_format check
|
|
kernel BUG at fs/inode.c:LINE! (2)
|
-1 |
C |
|
done |
5 |
1800d |
1939d
|
1/1 |
1767d |
24a806d849c0
erofs: add unsupported inode i_format check
|
|
general protection fault in __queue_work
|
2 |
syz |
|
done |
1 |
1800d |
2048d
|
1/1 |
1767d |
e2cb6b891ad2
bluetooth: eliminate the potential race condition when removing the HCI controller
|
|
general protection fault in nl802154_del_llsec_devkey
|
2 |
C |
|
done |
110 |
1813d |
1872d
|
1/1 |
1781d |
27c746869e1a
net: ieee802154: fix nl802154 del llsec devkey
|
|
general protection fault in nl802154_add_llsec_key
|
2 |
C |
|
done |
106 |
1813d |
1868d
|
1/1 |
1781d |
20d5fe2d7103
net: ieee802154: fix nl802154 add llsec key
|
|
general protection fault in nl802154_del_llsec_key
|
2 |
C |
|
done |
91 |
1813d |
1866d
|
1/1 |
1781d |
37feaaf5ceb2
net: ieee802154: fix nl802154 del llsec key
|
|
general protection fault in ieee802154_llsec_parse_key_id
|
11 |
C |
|
done |
64 |
1813d |
1864d
|
1/1 |
1783d |
6f7f657f2440
net: ieee802154: nl-mac: fix check on panid
|
|
WARNING in cfg80211_connect
|
-1 |
C |
|
done |
336 |
1813d |
2007d
|
1/1 |
1783d |
1b5ab825d9ac
cfg80211: remove WARN_ON() in cfg80211_sme_connect
|
|
general protection fault in nl802154_del_llsec_dev
|
2 |
C |
|
done |
70 |
1814d |
1871d
|
1/1 |
1784d |
3d1eac2f4558
net: ieee802154: fix nl802154 del llsec dev
|
|
general protection fault in crypto_destroy_tfm
|
2 |
syz |
|
done |
12 |
1815d |
1860d
|
1/1 |
1785d |
a0b96b4a6274
drivers: net: fix memory leak in peak_usb_create_dev
|
|
BUG: sleeping function called from invalid context in htb_destroy
|
5 |
C |
|
done |
2 |
1835d |
2356d
|
1/1 |
1804d |
e323d865b361
net: sched: validate stab values
|
|
possible deadlock in red_change
|
4 |
C |
|
done |
10 |
1836d |
2076d
|
1/1 |
1806d |
e323d865b361
net: sched: validate stab values
|
|
BUG: unable to handle kernel NULL pointer dereference in __lookup_slow
|
10 |
C |
|
done |
23 |
1849d |
2007d
|
1/1 |
1816d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
WARNING in ext4_xattr_set_entry
|
-1 |
C |
|
done |
12 |
1850d |
1984d
|
1/1 |
1819d |
6b22489911b7
ext4: do not try to set xattr into ea_inode if value is empty
|
|
BUG: unable to handle kernel NULL pointer dereference in amp_read_loc_assoc_final_data
|
10 |
C |
|
done |
114 |
1854d |
2070d
|
1/1 |
1819d |
e8bd76ede155
Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
|
|
KASAN: use-after-free Read in skb_dequeue
|
19 |
syz |
|
done |
1 |
1861d |
2066d
|
1/1 |
1828d |
c17af96554a8
btrfs: raid56: simplify tracking of Q stripe presence
|
|
KASAN: use-after-free Read in ntfs_iget
|
19 |
C |
|
done |
1 |
1861d |
1921d
|
1/1 |
1828d |
4dfe6bd94959
ntfs: check for valid standard information attribute
|
|
KASAN: use-after-free Read in ntfs_read_locked_inode
|
19 |
C |
|
done |
2 |
1864d |
2013d
|
1/1 |
1833d |
4dfe6bd94959
ntfs: check for valid standard information attribute
|
|
kernel BUG in pfkey_send_acquire
|
-1 |
C |
|
done |
56 |
1870d |
1899d
|
1/1 |
1840d |
cecf5d87ff20
block: split .sysfs_lock into two locks
|
|
general protection fault in ioctl_standard_call
|
2 |
C |
|
done |
23 |
1874d |
1988d
|
1/1 |
1843d |
5122565188ba
wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
|
|
KASAN: slab-out-of-bounds Read in squashfs_export_iget
|
17 |
C |
|
done |
5 |
1885d |
1985d
|
1/1 |
1855d |
eabac19e40c0
squashfs: add more sanity checks in inode lookup
|
|
general protection fault in ieee80211_subif_start_xmit
|
2 |
C |
|
done |
4 |
1889d |
1931d
|
1/1 |
1856d |
054c9939b480
mac80211: pause TX while changing interface type
|
|
UBSAN: undefined-behaviour in tcindex_set_parms
|
-1 |
C |
|
done |
39 |
1902d |
2017d
|
1/1 |
1863d |
bcd0cf19ef82
net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
|
|
kernel BUG at fs/reiserfs/prints.c:LINE!
|
-1 |
C |
|
done |
5 |
1912d |
2003d
|
1/1 |
1864d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KASAN: use-after-free Read in search_by_entry_key
|
19 |
C |
|
done |
1 |
1912d |
2002d
|
1/1 |
1865d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
KASAN: slab-out-of-bounds Read in squashfs_get_id
|
17 |
C |
|
|
58 |
1871d |
2015d
|
1/1 |
1866d |
f37aa4c7366e
squashfs: add more sanity checks in id lookup
|
|
KASAN: use-after-free Read in squashfs_get_id
|
19 |
C |
|
|
3 |
1910d |
1964d
|
1/1 |
1866d |
f37aa4c7366e
squashfs: add more sanity checks in id lookup
|
|
KASAN: use-after-free Read in tls_write_space
|
19 |
C |
|
done |
25 |
1918d |
2543d
|
1/1 |
1888d |
f45a4248ea4c
net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
|
|
divide error in do_journal_end
|
2 |
C |
|
done |
2 |
1920d |
1980d
|
1/1 |
1890d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
general protection fault in dqput
|
2 |
C |
|
done |
2 |
1921d |
1934d
|
1/1 |
1890d |
11c514a99bb9
quota: Sanity-check quota file headers on load
|
|
WARNING in md_ioctl
|
-1 |
C |
|
done |
199 |
1921d |
2538d
|
1/1 |
1890d |
c731b84b51bf
md: fix a warning caused by a race between concurrent md_ioctl()s
|
|
general protection fault in hci_phy_link_complete_evt
|
2 |
C |
|
done |
28 |
1925d |
2068d
|
1/1 |
1894d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
KASAN: use-after-free Read in leaf_paste_entries
|
19 |
C |
|
done |
1 |
1928d |
1928d
|
1/1 |
1897d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
general protection fault in hci_event_packet
|
2 |
C |
|
done |
3 |
1929d |
1995d
|
1/1 |
1898d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
KASAN: slab-out-of-bounds Read in hci_le_meta_evt
|
17 |
C |
|
done |
12 |
1929d |
2069d
|
1/1 |
1898d |
f7e0e8b2f1b0
Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
|
|
KASAN: use-after-free Read in reiserfs_read_locked_inode
|
19 |
C |
|
done |
4 |
1932d |
2014d
|
1/1 |
1902d |
d24396c5290b
reiserfs: add check for an invalid ih_entry_count
|
|
INFO: task hung in rdma_destroy_id
|
1 |
C |
|
done |
2 |
1932d |
1963d
|
1/1 |
1902d |
96ebc9c871d8
usb: uas: Add PNY USB Portable SSD to unusual_uas
|
|
INFO: task hung in do_read_cache_page
|
1 |
C |
|
done |
2 |
1934d |
1994d
|
1/1 |
1903d |
8d1ddb5e7937
fcntl: Fix potential deadlock in send_sig{io, urg}()
|
|
BUG: unable to handle kernel paging request in dquot_add_space
|
8 |
C |
|
done |
1 |
1936d |
1996d
|
1/1 |
1904d |
11c514a99bb9
quota: Sanity-check quota file headers on load
|
|
BUG: unable to handle kernel paging request in dqput
|
8 |
C |
|
done |
8 |
1934d |
2003d
|
1/1 |
1904d |
11c514a99bb9
quota: Sanity-check quota file headers on load
|
|
general protection fault in gfs2_ri_update
|
2 |
C |
|
done |
28 |
1940d |
2016d
|
1/1 |
1907d |
778721510e84
gfs2: check for empty rgrp tree in gfs2_ri_update
|
|
KASAN: use-after-free Write in sco_chan_del
|
22 |
C |
|
done |
10 |
1943d |
2067d
|
1/1 |
1912d |
6dfccd13db2f
Bluetooth: Fix null pointer dereference in hci_event_packet()
|
|
KASAN: use-after-free Read in btrfs_scan_one_device
|
19 |
C |
|
done |
43 |
1947d |
2022d
|
1/1 |
1917d |
0697d9a61099
btrfs: don't access possibly stale fs_info data for printing duplicate device
|
|
BUG: sleeping function called from invalid context in corrupted
|
5 |
C |
|
done |
2 |
1954d |
1955d
|
1/1 |
1923d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
BUG: sleeping function called from invalid context in sta_info_move_state
|
5 |
C |
|
done |
760 |
1953d |
1955d
|
1/1 |
1923d |
7bc40aedf24d
mac80211: free sta in sta_info_insert_finish() on errors
|
|
KASAN: slab-out-of-bounds Read in ntfs_attr_find
|
17 |
C |
|
done |
10 |
1955d |
2012d
|
1/1 |
1924d |
4f8c94022f0b
ntfs: add check for mft record size in superblock
|
|
general protection fault in rose_send_frame
|
2 |
C |
|
done |
5 |
1959d |
2537d
|
1/1 |
1924d |
3b3fd068c56e
rose: Fix Null pointer dereference in rose_send_frame()
|
|
KASAN: slab-out-of-bounds Read in soft_cursor
|
17 |
C |
|
done |
61 |
1972d |
2310d
|
1/1 |
1942d |
13774d81f385
ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
|
|
KASAN: use-after-free Read in debugfs_remove
|
19 |
C |
|
done |
15 |
1977d |
2473d
|
1/1 |
1946d |
bad8e64fb19d
blktrace: fix debugfs use after free
|
|
UBSAN: undefined-behaviour in init_sb
|
-1 |
C |
|
done |
2 |
1979d |
2012d
|
1/1 |
1949d |
0ddc5154b24c
gfs2: add validation checks for size of superblock
|
|
WARNING in unlock_new_inode
|
-1 |
C |
|
done |
66 |
1979d |
2018d
|
1/1 |
1949d |
8859bf2b1278
reiserfs: only call unlock_new_inode() if I_NEW
|
|
KASAN: use-after-free Read in tipc_mcast_xmit
|
19 |
C |
|
done |
3 |
1980d |
2003d
|
1/1 |
1949d |
ed42989eab57
tipc: fix the skb_unshare() in tipc_buf_append()
|
|
KASAN: global-out-of-bounds Read in fb_pad_aligned_buffer
|
17 |
C |
|
done |
5 |
1980d |
2306d
|
1/1 |
1949d |
3c4e0dff2095
vt: Disable KD_FONT_OP_COPY
|
|
KASAN: use-after-free Read in ntfs_attr_find
|
19 |
C |
|
done |
13 |
1981d |
2012d
|
1/1 |
1950d |
4f8c94022f0b
ntfs: add check for mft record size in superblock
|
|
divide error in tabledist
|
2 |
C |
|
done |
3 |
1991d |
2348d
|
1/1 |
1961d |
eadd1befdd77
netem: fix zero division in tabledist
|
|
general protection fault in qp_release_pages
|
2 |
C |
|
done |
4 |
1992d |
1994d
|
1/1 |
1961d |
90ca6333fd65
VMCI: check return value of get_user_pages_fast() for errors
|
|
UBSAN: undefined-behaviour in tabledist
|
-1 |
C |
|
done |
2 |
2000d |
2000d
|
1/1 |
1968d |
eadd1befdd77
netem: fix zero division in tabledist
|
|
KASAN: global-out-of-bounds Read in fbcon_get_font
|
17 |
C |
|
done |
47 |
1999d |
2311d
|
1/1 |
1968d |
5af08640795b
fbcon: Fix global-out-of-bounds read in fbcon_get_font()
|
|
KASAN: slab-out-of-bounds Read in fbcon_get_font
|
17 |
C |
|
done |
97 |
2003d |
2311d
|
1/1 |
1972d |
bc5269ca7650
vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
|
|
general protection fault in get_unique_tuple
|
2 |
C |
|
done |
33 |
2003d |
2265d
|
1/1 |
1972d |
1cc5ef91d2ff
netfilter: ctnetlink: add a range check for l3/l4 protonum
|
|
general protection fault in nf_nat_setup_info
|
2 |
C |
|
done |
22 |
2008d |
2099d
|
1/1 |
1977d |
1cc5ef91d2ff
netfilter: ctnetlink: add a range check for l3/l4 protonum
|
|
KASAN: use-after-free Read in soft_cursor
|
19 |
C |
|
done |
16 |
2012d |
2309d
|
1/1 |
1982d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
KASAN: global-out-of-bounds Read in get_unique_tuple
|
17 |
C |
|
done |
1 |
2013d |
2253d
|
1/1 |
1983d |
1cc5ef91d2ff
netfilter: ctnetlink: add a range check for l3/l4 protonum
|
|
KASAN: global-out-of-bounds Read in fbcon_resize
|
17 |
C |
|
done |
286 |
2016d |
2035d
|
1/1 |
1985d |
ec0972adecb3
fbcon: Fix user font detection test at fbcon_resize().
|
|
general protection fault in __sock_release
|
2 |
syz |
|
done |
8 |
2030d |
2042d
|
1/1 |
2000d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in snd_pcm_plugin_build_mulaw
|
-1 |
C |
|
done |
2 |
2032d |
2042d
|
1/1 |
2000d |
949a1ebe8cea
ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
|
|
KASAN: use-after-free Read in seq_release_private
|
19 |
syz |
|
done |
1 |
2031d |
2031d
|
1/1 |
2000d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING: ODEBUG bug in get_signal
|
-1 |
syz |
|
done |
3 |
2033d |
2043d
|
1/1 |
2002d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING in snd_pcm_drop
|
-1 |
syz |
|
done |
1 |
2033d |
2033d
|
1/1 |
2002d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
WARNING: ODEBUG bug in exit_to_usermode_loop
|
-1 |
syz |
|
done |
2 |
2033d |
2035d
|
1/1 |
2002d |
70e37988db94
nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
|
|
general protection fault in tty_release
|
2 |
C |
|
done |
9 |
2034d |
2041d
|
1/1 |
2003d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Write in __sock_release
|
22 |
syz |
|
done |
1 |
2035d |
2035d
|
1/1 |
2005d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in locks_remove_file
|
19 |
syz |
|
done |
4 |
2035d |
2043d
|
1/1 |
2005d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in cuse_channel_release
|
19 |
syz |
|
done |
1 |
2036d |
2036d
|
1/1 |
2005d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in __fput
|
19 |
syz |
|
done |
1 |
2037d |
2037d
|
1/1 |
2006d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Write in ex_handler_refcount
|
22 |
C |
|
done |
11 |
2037d |
2245d
|
1/1 |
2006d |
f9c70bdc279b
Bluetooth: add a mutex lock to avoid UAF in do_enale_set
|
|
kernel BUG at include/linux/fs.h:LINE!
|
-1 |
syz |
|
done |
1 |
2037d |
2037d
|
1/1 |
2006d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in snd_pcm_oss_release
|
19 |
syz |
|
done |
1 |
2037d |
2037d
|
1/1 |
2006d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
kernel BUG at fs/inode.c:LINE!
|
-1 |
syz |
|
done |
2 |
2037d |
2067d
|
1/1 |
2007d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: invalid-free in vcs_release
|
24 |
syz |
|
done |
1 |
2038d |
2038d
|
1/1 |
2008d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in fbcon_cursor
|
19 |
syz |
|
done |
4 |
2039d |
2299d
|
1/1 |
2009d |
50145474f6ef
fbcon: remove soft scrollback code
|
|
BUG: corrupted list in mousedev_release
|
8 |
syz |
|
done |
1 |
2039d |
2039d
|
1/1 |
2009d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
KASAN: use-after-free Read in eventfd_release
|
19 |
syz |
|
done |
1 |
2041d |
2041d
|
1/1 |
2010d |
77f4689de17c
fix regression in "epoll: Keep a reference on files added to the check list"
|
|
INFO: trying to register non-static key in uhid_char_release
|
-1 |
C |
|
done |
3 |
2040d |
2063d
|
1/1 |
2010d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
WARNING in corrupted (2)
|
-1 |
C |
|
done |
1 |
2041d |
2041d
|
1/1 |
2011d |
949a1ebe8cea
ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
|
|
INFO: trying to register non-static key in uhid_dev_destroy
|
-1 |
C |
|
done |
14 |
2049d |
2217d
|
1/1 |
2018d |
bce1305c0ece
HID: core: Correctly handle ReportSize being zero
|
|
KASAN: slab-out-of-bounds Read in vcs_scr_readw
|
17 |
C |
|
inconclusive |
80 |
2301d |
2311d
|
1/1 |
2021d |
0c9acb1af77a
vcs: prevent write access to vcsu devices
|
|
WARNING in inc_nlink
|
-1 |
C |
|
done |
8 |
2051d |
2200d
|
1/1 |
2021d |
facb03dddec0
fs/minix: don't allow getting deleted inodes
|
|
BUG: unable to handle kernel NULL pointer dereference in get_block
|
10 |
C |
|
done |
60 |
2055d |
2205d
|
1/1 |
2024d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: slab-out-of-bounds Read in get_block
|
17 |
C |
|
done |
3 |
2058d |
2173d
|
1/1 |
2027d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: use-after-free Read in get_block
|
19 |
C |
|
done |
6 |
2058d |
2190d
|
1/1 |
2027d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: slab-out-of-bounds Read in hci_event_packet
|
17 |
C |
|
done |
15 |
2058d |
2268d
|
1/1 |
2027d |
51c19bf3d5cf
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
|
|
KASAN: slab-out-of-bounds Read in bacpy
|
17 |
C |
|
done |
3 |
2064d |
2526d
|
1/1 |
2030d |
51c19bf3d5cf
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
|
|
KASAN: slab-out-of-bounds Read in hci_extended_inquiry_result_evt
|
17 |
C |
|
done |
6 |
2062d |
2096d
|
1/1 |
2030d |
51c19bf3d5cf
Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
|
|
KASAN: null-ptr-deref Read in drm_dp_aux_dev_get_by_minor
|
11 |
C |
|
done |
1 |
2063d |
2123d
|
1/1 |
2030d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
KASAN: slab-out-of-bounds Read in hci_inquiry_result_with_rssi_evt
|
17 |
C |
|
done |
4 |
2062d |
2091d
|
1/1 |
2030d |
629b49c848ee
Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
|
|
KASAN: use-after-free Read in l2cap_chan_close
|
19 |
C |
|
done |
8 |
2063d |
2245d
|
1/1 |
2030d |
f9c70bdc279b
Bluetooth: add a mutex lock to avoid UAF in do_enale_set
|
|
BUG: unable to handle kernel NULL pointer dereference in do_syscall_64 (2)
|
10 |
C |
|
done |
4 |
2067d |
2079d
|
1/1 |
2035d |
033724d68642
fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
|
|
divide error in fbcon_switch
|
2 |
C |
|
done |
259 |
2072d |
2311d
|
1/1 |
2037d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
general protection fault in do_con_write
|
2 |
C |
|
done |
3008 |
2072d |
2311d
|
1/1 |
2037d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
kernel BUG at fs/buffer.c:LINE!
|
-1 |
syz |
|
done |
23 |
2068d |
2521d
|
1/1 |
2037d |
270ef41094e9
fs/minix: reject too-large maximum file size
|
|
general protection fault in free_netdev
|
2 |
C |
|
done |
99 |
2069d |
2099d
|
1/1 |
2037d |
46ef5b89ec0e
ip6_gre: fix null-ptr-deref in ip6gre_init_net()
|
|
BUG: unable to handle kernel paging request in do_con_trol
|
8 |
C |
|
done |
36 |
2072d |
2304d
|
1/1 |
2041d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
WARNING in snd_info_get_line
|
-1 |
C |
|
done |
23 |
2072d |
2084d
|
1/1 |
2041d |
60379ba08532
ALSA: info: Drop WARN_ON() from buffer NULL sanity check
|
|
BUG: unable to handle kernel paging request in insert_char
|
8 |
C |
|
done |
46 |
2086d |
2306d
|
1/1 |
2055d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
INFO: task hung in __flush_work
|
1 |
syz |
|
done |
6 |
2087d |
2536d
|
1/1 |
2057d |
a39c46067c84
net/9p: validate fds in p9_fd_open
|
|
KASAN: null-ptr-deref Read in do_con_trol
|
11 |
C |
|
done |
1 |
2087d |
2238d
|
1/1 |
2057d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
KASAN: null-ptr-deref Read in insert_char
|
11 |
C |
|
done |
3 |
2088d |
2283d
|
1/1 |
2058d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
KASAN: user-memory-access Read in insert_char
|
17 |
C |
|
done |
2 |
2090d |
2303d
|
1/1 |
2059d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
BUG: unable to handle kernel paging request in csi_J
|
8 |
C |
|
done |
3 |
2099d |
2267d
|
1/1 |
2068d |
ce684552a266
vt: Reject zero-sized screen buffer size.
|
|
BUG: unable to handle kernel NULL pointer dereference in generic_perform_write (2)
|
10 |
C |
|
done |
1 |
2110d |
2200d
|
1/1 |
2080d |
829b37b8cddb
ext4: avoid race conditions when remounting with options that change dax
|
|
WARNING in enqueue_task_dl
|
-1 |
syz |
|
done |
1 |
2117d |
2447d
|
1/1 |
2087d |
ce9bc3b27f2a
sched/deadline: Initialize ->dl_boosted
|
|
general protection fault in batadv_iv_ogm_schedule_buff
|
2 |
|
|
|
6 |
2205d |
2261d
|
1/1 |
2092d |
8e8ce08198de
batman-adv: Don't schedule OGM for disabled interface
|
|
general protection fault in fq_codel_enqueue
|
2 |
C |
|
done |
5 |
2139d |
2168d
|
1/1 |
2109d |
6dd912f82680
net: check untrusted gso_size at kernel entry
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE! (2)
|
-1 |
C |
|
done |
82 |
2140d |
2281d
|
1/1 |
2110d |
57d38f26d81e
vt: fix unicode console freeing with a common interface
|
|
INFO: trying to register non-static key in hci_uart_flush
|
-1 |
syz |
|
done |
4 |
2145d |
2389d
|
1/1 |
2114d |
4946ea5c1237
netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
|
|
KASAN: use-after-free Write in snd_rawmidi_kernel_write1
|
22 |
C |
|
done |
1 |
2146d |
2176d
|
1/1 |
2116d |
c1f6e3c818dd
ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
|
|
KASAN: null-ptr-deref Write in choke_reset
|
12 |
C |
|
done |
236 |
2148d |
2173d
|
1/1 |
2117d |
e9b3c610a05c
USB: serial: garmin_gps: add sanity checking for data length
|
|
KASAN: use-after-free Read in rdma_listen
|
19 |
syz |
|
done |
143 |
2179d |
2491d
|
1/1 |
2148d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
KASAN: use-after-free Read in cma_cancel_operation
|
19 |
C |
|
done |
6 |
2191d |
2341d
|
1/1 |
2161d |
7c11910783a1
RDMA/ucma: Put a lock around every call to the rdma_cm layer
|
|
WARNING in geneve_exit_batch_net
|
-1 |
C |
|
done |
2 |
2193d |
2238d
|
1/1 |
2163d |
0fda7600c2e1
geneve: move debug check after netdev unregister
|
|
WARNING: ODEBUG bug in rfcomm_dev_ioctl
|
-1 |
C |
|
done |
1 |
2194d |
2194d
|
1/1 |
2163d |
71811cac8532
Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
|
|
KASAN: use-after-free Write in release_tty
|
22 |
C |
|
done |
148 |
2194d |
2311d
|
1/1 |
2163d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
WARNING: ODEBUG bug in route4_change
|
-1 |
C |
|
done |
28 |
2198d |
2218d
|
1/1 |
2168d |
ef299cc3fa1a
net_sched: cls_route: remove the right filter from hashtable
|
|
WARNING: refcount bug in sock_wfree
|
13 |
C |
done |
done |
1 |
2201d |
2321d
|
1/1 |
2171d |
5c3e82fe1596
sctp: fix refcount bug in sctp_wfree
|
|
KASAN: use-after-free Read in tty_open
|
19 |
C |
|
done |
2 |
2205d |
2311d
|
1/1 |
2175d |
ca4463bf8438
vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
|
|
BUG: unable to handle kernel paging request in init_srcu_struct_fields
|
8 |
syz |
|
done |
3 |
2205d |
2403d
|
1/1 |
2175d |
28df0642abbf
usbip: tools: Fix read_usb_vudc_device() error path handling
|
|
KASAN: slab-out-of-bounds Read in selinux_xfrm_alloc_user
|
17 |
C |
|
done |
3 |
2207d |
2212d
|
1/1 |
2176d |
a1a7e3a36e01
xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
|
|
WARNING: ODEBUG bug in rfcomm_dlc_free
|
-1 |
C |
|
done |
21 |
2208d |
2439d
|
1/1 |
2177d |
71811cac8532
Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
|
|
KASAN: slab-out-of-bounds Write in tcindex_set_parms
|
21 |
C |
|
done |
2 |
2212d |
2212d
|
1/1 |
2179d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
KASAN: use-after-free Write in tcindex_set_parms
|
22 |
C |
|
done |
3 |
2211d |
2215d
|
1/1 |
2179d |
0d1c3530e1bd
net_sched: keep alloc_hash updated after hash allocation
|
|
possible deadlock in ovl_write_iter (2)
|
4 |
syz |
|
done |
2 |
2213d |
2213d
|
1/1 |
2183d |
b63e48fb50e1
USB: Disable LPM on WD19's Realtek Hub
|
|
KASAN: use-after-free Read in n_tty_receive_buf_common
|
19 |
C |
|
done |
40 |
2215d |
2309d
|
1/1 |
2184d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
inconsistent lock state in rxrpc_put_client_connection_id
|
4 |
C |
|
done |
89 |
2223d |
2240d
|
1/1 |
2193d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
KASAN: use-after-free Read in ext4_xattr_set_entry
|
19 |
syz |
|
done |
10 |
2223d |
2471d
|
1/1 |
2193d |
9803387c55f7
ext4: validate the debug_want_extra_isize mount option at parse time
|
|
inconsistent lock state in rxrpc_put_client_conn
|
4 |
C |
|
done |
6584 |
2223d |
2240d
|
1/1 |
2193d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
kernel BUG at net/rxrpc/local_object.c:LINE!
|
-1 |
C |
|
done |
13912 |
2225d |
2435d
|
1/1 |
2194d |
d12040b6933f
rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
|
|
general protection fault in selinux_socket_sendmsg
|
2 |
C |
|
done |
36 |
2226d |
2406d
|
1/1 |
2196d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
INFO: task hung in paste_selection
|
1 |
C |
|
done |
10 |
2227d |
2302d
|
1/1 |
2196d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
INFO: task hung in htable_put
|
1 |
C |
|
done |
8 |
2228d |
2274d
|
1/1 |
2198d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
|
|
kernel BUG at fs/reiserfs/lock.c:LINE! (2)
|
-1 |
C |
|
done |
2 |
2232d |
2232d
|
1/1 |
2201d |
4d5c1adaf893
reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
|
|
INFO: task hung in drain_all_pages
|
1 |
C |
|
done |
1 |
2232d |
2262d
|
1/1 |
2202d |
380324734956
s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
|
|
KASAN: stack-out-of-bounds Write in ax25_getname
|
21 |
C |
|
done |
4 |
2236d |
2531d
|
1/1 |
2205d |
42d84c8490f9
vhost: Check docket sk_family instead of call getname
|
|
INFO: task hung in hashlimit_mt_check_common
|
1 |
C |
|
done |
3 |
2238d |
2253d
|
1/1 |
2207d |
8d0015a7ab76
netfilter: xt_hashlimit: limit the max size of hashtable
|
|
INFO: task hung in tty_ldisc_hangup
|
1 |
C |
|
done |
10 |
2238d |
2305d
|
1/1 |
2207d |
e8c75a30a23c
vt: selection, push sel_lock up
|
|
general protection fault in padata_reorder
|
2 |
C |
|
done |
90 |
2237d |
2240d
|
1/1 |
2207d |
cad926f70b5a
padata: fix null pointer deref of pd->pinst
|
|
KASAN: slab-out-of-bounds Read in tcf_exts_destroy
|
17 |
C |
|
done |
1 |
2241d |
2358d
|
1/1 |
2211d |
599be01ee567
net_sched: fix an OOB access in cls_tcindex
|
|
BUG: sleeping function called from invalid context in tpk_write
|
5 |
C |
|
done |
30 |
2246d |
2308d
|
1/1 |
2216d |
9a655c77ff8f
ttyprintk: fix a potential deadlock in interrupt context issue
|
|
general protection fault in path_openat
|
2 |
C |
|
done |
13 |
2247d |
2253d
|
1/1 |
2217d |
6404674acd59
vfs: fix do_last() regression
|
|
KASAN: slab-out-of-bounds Read in __nla_put_nohdr
|
17 |
C |
|
done |
1 |
2254d |
2254d
|
1/1 |
2223d |
61678d28d4a4
net_sched: fix datalen for ematch
|
|
general protection fault in nft_chain_parse_hook
|
2 |
C |
|
done |
5 |
2254d |
2266d
|
1/1 |
2223d |
826035498ec1
netfilter: nf_tables: add __nft_chain_type_get()
|
|
WARNING in cbq_destroy_class
|
-1 |
C |
|
done |
1 |
2259d |
2259d
|
1/1 |
2228d |
2e24cd755552
net_sched: fix ops->bind_class() implementations
|
|
KASAN: slab-out-of-bounds Write in setup_udp_tunnel_sock
|
21 |
C |
|
done |
1 |
2260d |
2260d
|
1/1 |
2229d |
940ba1498665
gtp: make sure only SOCK_DGRAM UDP sockets are accepted
|
|
KASAN: use-after-free Read in snd_timer_resolution
|
19 |
C |
|
done |
2 |
2263d |
2263d
|
1/1 |
2233d |
60adcfde92fa
ALSA: seq: Fix racy access for queue timer in proc read
|
|
KASAN: use-after-free Read in tcp_check_sack_reordering
|
19 |
C |
|
done |
1 |
2263d |
2263d
|
1/1 |
2233d |
9a655c77ff8f
ttyprintk: fix a potential deadlock in interrupt context issue
|
|
general protection fault in xt_rateest_put
|
2 |
C |
|
done |
10 |
2264d |
2267d
|
1/1 |
2234d |
212e7f56605e
netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
|
|
BUG: corrupted list in nf_tables_commit
|
8 |
C |
|
done |
2 |
2267d |
2267d
|
1/1 |
2235d |
335178d5429c
netfilter: nf_tables: fix flowtable list del corruption
|
|
WARNING in nft_request_module
|
-1 |
C |
|
done |
1 |
2267d |
2267d
|
1/1 |
2235d |
9332d27d7918
netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
|
|
general protection fault in nft_tunnel_get_init
|
2 |
C |
|
done |
1 |
2267d |
2267d
|
1/1 |
2235d |
1c702bf902bd
netfilter: nft_tunnel: fix null-attribute check
|
|
general protection fault in nf_ct_netns_do_get
|
2 |
C |
|
done |
11 |
2271d |
2286d
|
1/1 |
2238d |
1b789577f655
netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
|
|
KASAN: use-after-free Write in __alloc_skb
|
22 |
C |
|
done |
2 |
2270d |
2338d
|
1/1 |
2240d |
d836f5c69d87
net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
|
|
general protection fault in xt_rateest_tg_checkentry
|
2 |
C |
|
done |
12 |
2271d |
2287d
|
1/1 |
2241d |
212e7f56605e
netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
|
|
KASAN: slab-out-of-bounds Read in macvlan_broadcast
|
17 |
C |
|
done |
10 |
2272d |
2276d
|
1/1 |
2241d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
KASAN: use-after-free Read in macvlan_broadcast
|
19 |
C |
|
done |
7 |
2273d |
2276d
|
1/1 |
2243d |
96cc4b69581d
macvlan: do not assume mac_header is set in macvlan_broadcast()
|
|
WARNING: bad unlock balance in gtp_encap_enable_socket
|
4 |
C |
|
done |
2 |
2275d |
2277d
|
1/1 |
2244d |
90d72256addf
gtp: fix bad unlock balance in gtp_encap_enable_socket
|
|
BUG: sleeping function called from invalid context in lock_sock_nested
|
5 |
syz |
|
done |
1 |
2279d |
2309d
|
1/1 |
2246d |
37f96694cf73
crypto: af_alg - Use bh_lock_sock in sk_destruct
|
|
general protection fault in rxrpc_connect_call
|
2 |
C |
|
done |
285 |
2281d |
2446d
|
1/1 |
2251d |
d12040b6933f
rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
|
|
possible deadlock in refcount_dec_and_mutex_lock
|
4 |
C |
done |
done |
5 |
2285d |
2340d
|
1/1 |
2254d |
1c05839aa973
nbd: fix shutdown and recv work deadlock v2
|
|
INFO: rcu detected stall in addrconf_dad_work (2)
|
1 |
C |
|
done |
1 |
2294d |
2294d
|
1/1 |
2263d |
d9e15a273306
pkt_sched: fq: do not accept silly TCA_FQ_QUANTUM
|
|
WARNING: refcount bug in cdev_get
|
13 |
C |
|
done |
12 |
2293d |
2419d
|
1/1 |
2263d |
94a72b3f024f
bridge/mdb: remove wrong use of NLM_F_MULTI
|
|
possible deadlock in __might_fault
|
4 |
C |
|
done |
385 |
2295d |
2546d
|
1/1 |
2264d |
19e6317d24c2
usb: mon: Fix a deadlock in usbmon between mmap and read
|
|
INFO: task hung in fsnotify_mark_destroy_workfn
|
1 |
syz |
|
done |
3 |
2297d |
2485d
|
1/1 |
2266d |
7e7c005b4b1f
rtc: disable uie before setting time and enable after
|
|
possible deadlock in mon_bin_vma_fault
|
4 |
C |
|
done |
375 |
2297d |
2547d
|
1/1 |
2267d |
19e6317d24c2
usb: mon: Fix a deadlock in usbmon between mmap and read
|
|
WARNING in xfrm6_tunnel_net_exit
|
-1 |
syz |
|
done |
34 |
2299d |
2547d
|
1/1 |
2268d |
f75a2804da39
xfrm: destroy xfrm_state synchronously on net exit path
|
|
inconsistent lock state in sp_get
|
4 |
C |
|
done |
1 |
2301d |
2301d
|
1/1 |
2270d |
5c9934b6767b
6pack,mkiss: fix possible deadlock
|
|
KASAN: slab-out-of-bounds Read in linear_transfer
|
17 |
C |
|
done |
2 |
2310d |
2310d
|
1/1 |
2279d |
4cc8d6505ab8
ALSA: pcm: oss: Avoid potential buffer overflows
|
|
WARNING: refcount bug in kobject_get
|
13 |
C |
|
done |
21 |
2310d |
2539d
|
1/1 |
2279d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
KASAN: use-after-free Read in slip_open
|
19 |
C |
done |
done |
7 |
2310d |
2322d
|
1/1 |
2279d |
e58c19124189
slip: Fix use-after-free Read in slip_open
|
|
INFO: task hung in vivid_stop_generating_vid_cap
|
1 |
C |
|
done |
291 |
2313d |
2547d
|
1/1 |
2283d |
6dcd5d7a7a29
media: vivid: Fix wrong locking that causes race conditions on streaming stop
|
|
INFO: task hung in sdr_cap_stop_streaming
|
1 |
C |
|
done |
152 |
2313d |
2547d
|
1/1 |
2283d |
6dcd5d7a7a29
media: vivid: Fix wrong locking that causes race conditions on streaming stop
|
|
KASAN: use-after-free Read in __vb2_perform_fileio
|
19 |
C |
|
done |
13 |
2314d |
2543d
|
1/1 |
2283d |
6dcd5d7a7a29
media: vivid: Fix wrong locking that causes race conditions on streaming stop
|
|
KASAN: use-after-free Read in kfree_skb
|
19 |
C |
|
done |
95 |
2317d |
2437d
|
1/1 |
2285d |
cf94da6f502d
Bluetooth: Fix invalid-free in bcsp_close()
|
|
WARNING in __vb2_queue_cancel
|
-1 |
C |
|
done |
11 |
2321d |
2532d
|
1/1 |
2290d |
6dcd5d7a7a29
media: vivid: Fix wrong locking that causes race conditions on streaming stop
|
|
WARNING: suspicious RCU usage in memfd_fcntl
|
4 |
C |
done |
done |
1879 |
2323d |
2345d
|
1/1 |
2293d |
e4cc9c81e230
memfd: Use radix_tree_deref_slot_protected to avoid the warning.
|
|
possible deadlock in ovl_write_iter
|
4 |
syz |
|
done |
84 |
2330d |
2540d
|
1/1 |
2294d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
KASAN: use-after-free Read in rxrpc_send_keepalive
|
19 |
syz |
|
done |
6 |
2345d |
2418d
|
1/1 |
2295d |
c48fc11b69e9
rxrpc: Fix call ref leak
|
|
BUG: corrupted list in p9_fd_cancelled
|
8 |
syz |
|
done |
2 |
2331d |
2394d
|
1/1 |
2295d |
697d877849d4
perf/core: Consistently fail fork on allocation failures
|
|
KASAN: use-after-free Read in __lock_sock
|
19 |
syz |
|
done |
2 |
2347d |
2347d
|
1/1 |
2296d |
09d6ac8dc51a
libata/ahci: Fix PCS quirk application
|
|
WARNING in corrupted
|
-1 |
syz |
|
done |
25 |
2367d |
2520d
|
1/1 |
2296d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
possible deadlock in io_submit_one
|
4 |
syz |
|
done |
406 |
2370d |
2547d
|
1/1 |
2296d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
WARNING in bpf_jit_free
|
-1 |
syz |
|
done |
293 |
2370d |
2547d
|
1/1 |
2297d |
c751798aa224
bpf: fix use after free in prog symbol exposure
|
|
KASAN: use-after-free Read in pneigh_get_next
|
19 |
syz |
|
done |
1 |
2481d |
2481d
|
1/1 |
2298d |
f3e92cb8e2eb
neigh: fix use-after-free read in pneigh_get_next
|
|
WARNING in ovl_rename
|
-1 |
syz |
|
done |
1 |
2530d |
2530d
|
1/1 |
2298d |
146d62e5a586
ovl: detect overlapping layers
|
|
kernel BUG at arch/x86/mm/physaddr.c:LINE!
|
-1 |
syz |
|
done |
1 |
2468d |
2468d
|
1/1 |
2298d |
5684abf7020d
ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
|
|
WARNING in ovl_instantiate
|
-1 |
syz |
|
done |
5 |
2538d |
2542d
|
1/1 |
2298d |
146d62e5a586
ovl: detect overlapping layers
|
|
WARNING: suspicious RCU usage in llc_sap_close
|
4 |
C |
|
done |
10 |
2336d |
2492d
|
1/1 |
2298d |
9708d2b5b7c6
llc: avoid blocking in llc_sap_close()
|
|
BUG: unable to handle kernel NULL pointer dereference in blk_mq_map_swqueue
|
10 |
C |
|
done |
12 |
2346d |
2531d
|
1/1 |
2300d |
e9e006f5fcf2
nbd: fix max number of supported devs
|
|
KASAN: null-ptr-deref Write in kvm_write_guest_virt_system
|
12 |
C |
|
done |
50 |
2364d |
2382d
|
1/1 |
2302d |
c552ffb5c93d
crypto: cavium/zip - Add missing single_release()
|
|
possible deadlock in free_ioctx_users
|
4 |
C |
|
done |
77 |
2369d |
2492d
|
1/1 |
2302d |
76e43c8ccaa3
fuse: fix deadlock with aio poll and fuse_iqueue::waitq.lock
|
|
KASAN: use-after-free Read in wait_consider_task
|
19 |
C |
|
done |
58 |
2374d |
2384d
|
1/1 |
2302d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
WARNING: ODEBUG bug in free_task
|
-1 |
C |
|
done |
165 |
2374d |
2384d
|
1/1 |
2302d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
general protection fault in tcf_action_destroy
|
2 |
C |
|
done |
15 |
2371d |
2393d
|
1/1 |
2302d |
b91ee4aa2a21
mISDN: enforce CAP_NET_RAW for raw sockets
|
|
WARNING: suspicious RCU usage in netem_enqueue
|
4 |
C |
|
done |
2 |
2376d |
2380d
|
1/1 |
2303d |
62794fc4fbf5
net_sched: add max len check for TCA_KIND
|
|
KASAN: use-after-free Read in __change_pid
|
19 |
C |
|
done |
4 |
2376d |
2383d
|
1/1 |
2303d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
possible deadlock in do_io_accounting
|
4 |
C |
|
done |
4 |
2374d |
2486d
|
1/1 |
2303d |
146d62e5a586
ovl: detect overlapping layers
|
|
KASAN: use-after-free Read in pids_release
|
19 |
C |
|
done |
7 |
2376d |
2383d
|
1/1 |
2303d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
general protection fault in release_task
|
2 |
C |
|
done |
3 |
2377d |
2383d
|
1/1 |
2304d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
general protection fault in wait_consider_task
|
2 |
C |
|
done |
5 |
2376d |
2382d
|
1/1 |
2304d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
INFO: rcu detected stall in netlink_sendmsg
|
1 |
C |
|
done |
3 |
2388d |
2393d
|
1/1 |
2304d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
KASAN: use-after-free Read in release_task
|
19 |
C |
|
done |
2 |
2378d |
2381d
|
1/1 |
2304d |
fe9bc1644918
RDMA/restrack: Protect from reentry to resource return path
|
|
WARNING in handle_desc
|
-1 |
C |
|
done |
1 |
2384d |
2384d
|
1/1 |
2304d |
3ca94192278c
KVM: X86: Fix userspace set invalid CR4
|
|
BUG: unable to handle kernel NULL pointer dereference in tc_bind_tclass
|
10 |
C |
|
done |
18 |
2379d |
2398d
|
1/1 |
2304d |
8b142a00edcf
net_sched: check cops->tcf_block in tc_bind_tclass()
|
|
general protection fault in qdisc_destroy
|
2 |
C |
|
done |
9 |
2384d |
2394d
|
1/1 |
2304d |
6efb971ba8ed
net_sched: let qdisc_put() accept NULL pointer
|
|
INFO: rcu detected stall in addrconf_dad_work
|
1 |
C |
|
done |
19 |
2386d |
2397d
|
1/1 |
2306d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in mld_ifc_timer_expire
|
1 |
C |
|
done |
33 |
2386d |
2398d
|
1/1 |
2306d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: rcu detected stall in br_handle_frame
|
1 |
C |
|
done |
41 |
2386d |
2398d
|
1/1 |
2306d |
d4d6ec6dac07
sch_hhf: ensure quantum and hhf_non_hh_weight are non-zero
|
|
INFO: task hung in __x64_sys_io_destroy
|
1 |
C |
|
done |
1 |
2387d |
2387d
|
1/1 |
2306d |
2d29bcc8c237
media: tvp5150: fix switch exit in set control handler
|
|
WARNING: refcount bug in hci_register_dev
|
13 |
C |
|
done |
3 |
2392d |
2404d
|
1/1 |
2308d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
WARNING in kernfs_get
|
-1 |
C |
|
done |
14 |
2392d |
2532d
|
1/1 |
2308d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
general protection fault in kernfs_add_one
|
2 |
C |
|
done |
8 |
2401d |
2540d
|
1/1 |
2308d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
general protection fault in packet_lookup_frame
|
2 |
C |
|
done |
1 |
2422d |
2422d
|
1/1 |
2309d |
32d3182cd2cd
net/packet: fix race in tpacket_snd()
|
|
WARNING in tty_set_termios
|
-1 |
C |
|
done |
151 |
2432d |
2541d
|
1/1 |
2310d |
b36a1552d731
Bluetooth: hci_uart: check for missing tty operations
|
|
general protection fault in tcf_ife_init
|
2 |
C |
|
done |
15 |
2430d |
2447d
|
1/1 |
2310d |
c8ec4632c6ac
ife: error out when nla attributes are empty
|
|
KASAN: null-ptr-deref Write in kthread_stop
|
12 |
C |
|
done |
12 |
2430d |
2535d
|
1/1 |
2310d |
6dcd5d7a7a29
media: vivid: Fix wrong locking that causes race conditions on streaming stop
|
|
general protection fault in rds_recv_rcvbuf_delta
|
2 |
C |
|
done |
7 |
2437d |
2484d
|
1/1 |
2311d |
c5c1a030a7db
net/rds: An rds_sock is added too early to the hash table
|
|
INFO: task hung in blkdev_issue_flush
|
1 |
C |
|
done |
2 |
2465d |
2465d
|
1/1 |
2311d |
6e4d91aa0718
hwmon: (acpi_power_meter) Change log level for 'unsafe software power cap'
|
|
general protection fault in iptunnel_xmit
|
2 |
C |
|
done |
2 |
2439d |
2439d
|
1/1 |
2311d |
5684abf7020d
ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
|
|
WARNING in kernfs_put
|
-1 |
C |
|
done |
1 |
2470d |
2470d
|
1/1 |
2312d |
ac43432cb1f5
driver core: Fix use-after-free and double free on glue directory
|
|
WARNING in notify_change
|
-1 |
C |
|
done |
12 |
2475d |
2532d
|
1/1 |
2313d |
f69e749a4935
Abort file_remove_privs() for non-reg. files
|
|
BUG: unable to handle kernel paging request in coalesced_mmio_write
|
8 |
C |
|
done |
2 |
2474d |
2474d
|
1/1 |
2313d |
b60fe990c6b0
KVM: coalesced_mmio: add bounds checking
|
|
possible deadlock in userfaultfd_release
|
4 |
C |
|
done |
4 |
2475d |
2480d
|
1/1 |
2313d |
cbcfa130a911
fs/userfaultfd.c: disable irqs for fault_pending and event locks
|
|
possible deadlock in acct_pin_kill
|
4 |
C |
|
done |
125 |
2506d |
2540d
|
1/1 |
2313d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
WARNING in xfrm_state_fini
|
-1 |
C |
|
done |
78 |
2522d |
2546d
|
1/1 |
2314d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
WARNING in __flush_work
|
-1 |
C |
|
done |
135 |
2520d |
2525d
|
1/1 |
2314d |
ac3b35f11a06
drm/udl: Replace drm_dev_unref with drm_dev_put
|
|
KASAN: use-after-free Read in get_mem_cgroup_from_mm
|
19 |
C |
|
done |
6 |
2528d |
2542d
|
1/1 |
2314d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in ip6erspan_set_version
|
2 |
C |
|
done |
7 |
2538d |
2547d
|
1/1 |
2314d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
possible deadlock in pipe_lock
|
4 |
C |
|
done |
2 |
2530d |
2533d
|
1/1 |
2314d |
146d62e5a586
ovl: detect overlapping layers
|
|
general protection fault in sctp_timeout_obj_to_nlattr
|
2 |
C |
|
done |
7 |
2542d |
2546d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in generic_timeout_obj_to_nlattr
|
2 |
C |
|
done |
11 |
2542d |
2547d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in gre_timeout_obj_to_nlattr
|
2 |
C |
|
done |
13 |
2542d |
2547d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in tcp_timeout_obj_to_nlattr
|
2 |
C |
|
done |
7 |
2543d |
2545d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in icmp_timeout_obj_to_nlattr
|
2 |
C |
|
done |
3 |
2545d |
2547d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in udp_timeout_obj_to_nlattr
|
2 |
C |
|
done |
8 |
2543d |
2547d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|
|
general protection fault in dccp_timeout_obj_to_nlattr
|
2 |
C |
|
done |
7 |
2543d |
2547d
|
1/1 |
2315d |
5593530e5694
Revert "tipc: fix modprobe tipc failed after switch order of device registration"
|