|
UBSAN: shift-out-of-bounds in aio_iiro_16_attach
origin:lts-only
|
-1 |
syz, C |
|
done |
29 |
395d |
429d
|
2/3 |
never |
66acb1586737
comedi: aio_iiro_16: Fix bit shift out of bounds
|
|
KASAN: use-after-free Read in remove_wait_queue
|
19 |
syz, C |
|
done |
25 |
396d |
417d
|
2/3 |
never |
35b6fc51c666
comedi: fix race between polling and detaching
|
|
WARNING in smsusb_start_streaming/usb_submit_urb
origin:upstream
|
-1 |
syz, C |
|
done |
3 |
404d |
495d
|
2/3 |
never |
503bbde34cc3
usb: core: usb_submit_urb: downgrade type check
|
|
KASAN: use-after-free Read in uea_upload_pre_firmware
|
19 |
syz, C |
|
done |
3 |
40d |
60d
|
2/3 |
never |
f92832262718
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
|
|
WARNING in udf_process_sequence
origin:lts-only
|
-1 |
syz, C |
|
done |
4 |
394d |
402d
|
2/3 |
never |
1a11201668e8
udf: Verify partition map count
|
|
inconsistent lock state in valid_state (3)
origin:upstream
|
4 |
syz, C |
|
done |
303 |
26d |
156d
|
2/3 |
never |
b2606c302d7f
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
general protection fault in nilfs_mdt_save_to_shadow_map
origin:upstream
|
2 |
syz, C |
|
done |
26 |
116d |
173d
|
2/3 |
never |
837c7a59fb58
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|
|
KASAN: use-after-free Read in hdm_disconnect
origin:upstream
|
19 |
syz, C |
|
done |
135 |
330d |
759d
|
2/3 |
never |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
possible deadlock in input_event
missing-backport
origin:upstream
|
4 |
syz, C |
|
done |
554 |
98d |
1164d
|
2/3 |
never |
897d6a724773
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
|
|
possible deadlock in __blockdev_direct_IO
origin:upstream
|
4 |
syz, C |
|
done |
24 |
403d |
681d
|
2/3 |
never |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
general protection fault in bcsp_recv
origin:upstream
|
8 |
syz, C |
|
done |
13 |
298d |
467d
|
2/3 |
never |
ca94b2b036c2
Bluetooth: bcsp: receive data only if registered
|
|
kernel BUG in pskb_expand_head (2)
origin:lts-only
|
-1 |
syz, C |
|
done |
7 |
400d |
432d
|
2/3 |
never |
5ca2e29f6834
bpf, sockmap: Fix panic when calling skb_linearize
|
|
BUG: unable to handle kernel paging request in preempt_schedule_irq
origin:upstream
|
8 |
syz, C |
|
done |
21 |
393d |
513d
|
2/3 |
never |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
INFO: task hung in f2fs_balance_fs
origin:upstream
|
1 |
syz, C |
|
done |
528 |
25d |
1295d
|
2/3 |
never |
dafc90da0233
f2fs: fix to round down start offset of fallocate for pin file
|
|
KASAN: use-after-free Write in xfs_trans_committed_bulk
origin:lts-only
|
22 |
syz, C |
|
done |
43 |
469d |
1291d
|
0/3 |
never |
575689fc0ffa
xfs: fix super block buf log item UAF during force shutdown
|
|
WARNING in pkcs1pad_verify
|
-1 |
syz, C |
|
done |
4 |
36d |
38d
|
2/3 |
never |
6b81b6f400d1
crypto: rsa-pkcs1pad: Don't WARN on an empty digest
|
|
UBSAN: shift-out-of-bounds in pcl726_attach
origin:upstream
|
-1 |
syz, C |
|
done |
19 |
392d |
443d
|
2/3 |
never |
96cb948408b3
comedi: pcl726: Prevent invalid irq number
|
|
possible deadlock in try_to_wake_up
origin:upstream
|
4 |
syz, C |
|
done |
49 |
258d |
901d
|
3/3 |
250d |
d240b789dded
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
KASAN: use-after-free Write in diWrite
origin:upstream
|
22 |
syz, C |
|
done |
22 |
421d |
733d
|
3/3 |
379d |
f98bf80b20f4
jfs: fix null ptr deref in dtInsertEntry
|
|
WARNING in ath6kl_bmi_get_target_info
origin:upstream
|
-1 |
syz, C |
|
done |
18 |
441d |
677d
|
3/3 |
408d |
e7417421d893
wifi: ath6kl: remove WARN on bad firmware input
|
|
WARNING in ext4_iomap_begin
origin:upstream
|
-1 |
syz, C |
|
done |
8 |
472d |
505d
|
3/3 |
437d |
1a77a028a392
ext4: ensure i_size is smaller than maxbytes
|
|
KASAN: use-after-free Write in ext4_insert_dentry
origin:upstream
|
22 |
syz, C |
|
done |
4 |
513d |
663d
|
3/3 |
479d |
94824ac9a8aa
ext4: fix off-by-one error in do_split
|
|
possible deadlock in j1939_sk_queue_drop_all
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
7 |
535d |
1153d
|
3/3 |
503d |
5de195060b2e
mm: resolve faulty mmap_region() error path behaviour
|
|
KASAN: use-after-free Read in __ocfs2_find_path
origin:upstream
|
19 |
syz, C |
|
done |
11 |
542d |
718d
|
3/3 |
506d |
17c99ab3db2b
ocfs2: validate l_tree_depth to avoid out-of-bounds access
|
|
UBSAN: array-index-out-of-bounds in xtSearch (2)
origin:lts-only
|
15 |
syz, C |
|
done |
115 |
557d |
1053d
|
3/3 |
510d |
a1166e98d80c
jfs: define xtree root and page independently
|
|
KASAN: use-after-free Read in ocfs2_search_dirblock
|
19 |
syz, C |
|
done |
8 |
567d |
597d
|
3/3 |
531d |
03b605ac1e5b
ocfs2: check dir i_size in ocfs2_find_entry
|
|
possible deadlock in team_port_change_check
origin:upstream
|
4 |
syz, C |
|
done |
52 |
568d |
905d
|
3/3 |
534d |
bd099a2fa9be
team: prevent adding a device which is already a team device lower
|
|
KASAN: use-after-free Read in ocfs2_lock_global_qf
origin:lts-only
|
19 |
syz, C |
|
done |
4 |
619d |
619d
|
3/3 |
586d |
f44e6d70c100
ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
|
|
INFO: task hung in do_rmdir
origin:lts-only
|
1 |
syz, C |
|
done |
5 |
638d |
661d
|
3/3 |
602d |
28c21f0ac529
exfat: fix the infinite loop in exfat_readdir()
|
|
WARNING in nilfs_rmdir
origin:lts-only
|
-1 |
syz, C |
|
done |
4 |
640d |
648d
|
3/3 |
602d |
912188316a8c
nilfs2: prevent use of deleted inode
|
|
WARNING in netdev_queue_update_kobjects (2)
origin:upstream
|
-1 |
syz, C |
|
done |
303 |
648d |
692d
|
3/3 |
607d |
27aabf27fd01
Bluetooth: fix use-after-free in device_for_each_child()
|
|
WARNING: locking bug in ext4_ioctl
|
4 |
syz, C |
|
done |
251 |
649d |
1202d
|
3/3 |
608d |
48c335245371
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
UBSAN: array-index-out-of-bounds in dbAdjTree
origin:lts-only
|
15 |
syz, C |
|
done |
7 |
650d |
689d
|
3/3 |
609d |
a3d408870bc1
jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
|
|
possible deadlock in mi_read
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
827 |
684d |
1290d
|
3/3 |
641d |
47e8a17491e3
fs/ntfs3: Fix possible deadlock in mi_read
|
|
WARNING in cfg80211_wext_siwgenie
origin:lts-only
|
-1 |
syz, C |
|
done |
316 |
707d |
749d
|
3/3 |
665d |
e0f67494957f
Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
|
|
WARNING in rcu_sync_dtor
origin:upstream
|
-1 |
syz, C |
|
done |
157 |
707d |
789d
|
3/3 |
667d |
d3476f3dad4a
ext4: don't set SB_RDONLY after filesystem errors
|
|
UBSAN: array-index-out-of-bounds in dbSplit
|
15 |
syz, C |
|
done |
9 |
709d |
720d
|
3/3 |
674d |
25d2a3ff02f2
jfs: check if leafidx greater than num leaves per dmap tree
|
|
UBSAN: array-index-out-of-bounds in dbNextAG
origin:upstream
|
15 |
syz, C |
|
done |
4 |
716d |
809d
|
3/3 |
679d |
e63866a47556
jfs: fix out-of-bounds in dbNextAG() and diAlloc()
|
|
WARNING: bad unlock balance in ocfs2_read_blocks
origin:upstream
|
4 |
syz, C |
|
done |
10 |
717d |
736d
|
3/3 |
682d |
f55a33fe0fb5
ocfs2: remove unreasonable unlock in ocfs2_read_blocks
|
|
general protection fault in ima_post_path_mknod
origin:lts-only
|
2 |
syz, C |
|
done |
5 |
717d |
717d
|
3/3 |
682d |
f386c802a6fd
udf: Don't return bh from udf_expand_dir_adinicb()
|
|
KASAN: use-after-free Read in ext4_search_dir
|
19 |
syz, C |
|
done |
5 |
718d |
1195d
|
3/3 |
684d |
be2e9b111e27
ext4: avoid OOB when system.data xattr changes underneath the filesystem
|
|
KASAN: use-after-free Read in try_to_wake_up
|
19 |
syz, C |
|
done |
71 |
735d |
1190d
|
3/3 |
702d |
eb85dace897c
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
WARNING in skb_checksum_help
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
3337 |
760d |
1203d
|
3/3 |
716d |
e269d79c7d35
net: missing check virtio
|
|
possible deadlock in rds_wake_sk_sleep
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1 |
764d |
1207d
|
3/3 |
723d |
124f20c5f6e5
net:rds: Fix possible deadlock in rds_message_put
|
|
possible deadlock in hfsplus_file_extend
missing-backport
origin:lts-only
|
4 |
syz, C |
|
done |
3439 |
766d |
1292d
|
3/3 |
731d |
603d064d406a
hfsplus: fix to avoid false alarm of circular locking
|
|
UBSAN: array-index-out-of-bounds in diFree
origin:upstream
missing-backport
|
15 |
syz, C |
|
done |
13 |
770d |
816d
|
3/3 |
734d |
63f7fdf733ad
jfs: Fix array-index-out-of-bounds in diFree
|
|
possible deadlock in local_lock_acquire
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
54 |
767d |
909d
|
3/3 |
734d |
d240b789dded
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
possible deadlock in __lock_task_sighand
origin:upstream
|
4 |
syz, C |
|
done |
108 |
772d |
923d
|
3/3 |
740d |
d240b789dded
mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
|
|
WARNING in perf_event_release_kernel
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
774d |
1003d
|
3/3 |
742d |
3a5465418f5f
perf: Fix event leak upon exec and file release
|
|
kernel BUG in __block_write_begin_int
|
-1 |
syz, C |
|
done |
3 |
798d |
798d
|
3/3 |
756d |
a9e1ddc09ca5
nilfs2: fix kernel bug on rename operation of broken directory
|
|
KASAN: use-after-free Read in nilfs_set_link
|
19 |
syz, C |
|
done |
1 |
798d |
798d
|
3/3 |
756d |
a9e1ddc09ca5
nilfs2: fix kernel bug on rename operation of broken directory
|
|
kernel BUG in f2fs_vm_page_mkwrite
origin:upstream
|
-1 |
syz, C |
|
done |
3 |
801d |
843d
|
3/3 |
758d |
70f5ef5f33c3
f2fs: fix return value of f2fs_convert_inline_inode()
|
|
WARNING in ieee80211_check_rate_mask
origin:lts-only
|
-1 |
syz, C |
|
done |
29 |
768d |
879d
|
3/3 |
766d |
badabac392d3
wifi: mac80211: check basic rates validity
|
|
SYZFAIL: clone failed
origin:lts-only
|
-1 |
syz |
|
done |
1 |
847d |
969d
|
3/3 |
773d |
74751ef5c191
perf/core: Fix missing wakeup when waiting for context reference
|
|
WARNING in hid_output_report
origin:lts-only
|
-1 |
syz, C |
|
done |
8 |
817d |
817d
|
3/3 |
777d |
4aa2dcfbad53
HID: core: remove unnecessary WARN_ON() in implement()
|
|
possible deadlock in sock_hash_update_common
origin:upstream
|
4 |
syz, C |
|
done |
1 |
854d |
854d
|
3/3 |
814d |
98e948fb60d4
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
WARNING in sock_hash_delete_elem
|
-1 |
syz, C |
|
done |
987 |
896d |
923d
|
3/3 |
860d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in scheduler_tick
|
4 |
syz, C |
|
done |
162 |
897d |
921d
|
3/3 |
860d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_delete_elem
|
-1 |
syz, C |
|
done |
1015 |
896d |
923d
|
3/3 |
862d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING in sock_map_unref
|
-1 |
syz, C |
|
done |
18 |
897d |
899d
|
3/3 |
863d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
possible deadlock in hrtimer_run_queues
|
4 |
syz, C |
|
done |
20 |
897d |
922d
|
3/3 |
866d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING: proc registration bug in scsi_host_alloc
origin:lts-only
|
-1 |
syz, C |
|
inconclusive |
28 |
905d |
1270d
|
3/3 |
896d |
f23a4d6e0757
scsi: core: Fix unremoved procfs host directory regression
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
origin:upstream
|
8 |
syz, C |
|
done |
1 |
930d |
964d
|
3/3 |
898d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
BUG: unable to handle kernel paging request in copy_from_kernel_nofault
origin:upstream
|
8 |
syz, C |
|
done |
2 |
940d |
1043d
|
3/3 |
909d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
KASAN: use-after-free Read in unix_stream_read_actor
origin:lts-only
|
19 |
syz, C |
|
done |
1 |
1046d |
1048d
|
3/3 |
1015d |
4b7b492615cf
af_unix: fix use-after-free in unix_stream_read_actor()
|
|
INFO: task hung in xfs_buf_delwri_pushbuf
origin:lts-only
|
1 |
syz, C |
|
done |
30 |
1055d |
1289d
|
3/3 |
1023d |
f0c2d7d2abca
xfs: fix intermittent hang during quotacheck
|
|
general protection fault in inherit_task_group
origin:upstream
|
2 |
syz, C |
|
done |
4 |
1057d |
1062d
|
3/3 |
1023d |
a71ef31485bb
perf/core: Fix potential NULL deref
|
|
WARNING in isotp_tx_timer_handler
|
-1 |
syz, C |
|
done |
3 |
1057d |
1261d
|
3/3 |
1026d |
e163ad6a8639
can: isotp: add local echo tx processing and tx without FC
|
|
UBSAN: shift-out-of-bounds in extAlloc
origin:upstream
|
-1 |
syz, C |
|
done |
217 |
1102d |
1294d
|
3/3 |
1070d |
0225e10972fa
jfs: validate max amount of blocks before allocation.
|
|
possible deadlock in exfat_iterate
origin:upstream
|
4 |
syz, C |
|
done |
81 |
1140d |
1273d
|
3/3 |
1083d |
ff84772fd45d
exfat: release s_lock before calling dir_emit()
|
|
KASAN: null-ptr-deref Write in get_block
origin:upstream
missing-backport
|
12 |
syz, C |
|
done |
2 |
1149d |
1195d
|
3/3 |
1087d |
ea2b62f30589
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
possible deadlock in hugetlbfs_file_mmap
origin:lts-only
|
4 |
syz, C |
|
done |
242 |
1155d |
1294d
|
3/3 |
1091d |
111cd11bbc54
sched/cpuset: Bring back cpuset_mutex
|
|
INFO: task hung in drop_current_rng
origin:lts-only
|
1 |
syz, C |
|
done |
307 |
1159d |
1292d
|
3/3 |
1092d |
2bb31abdbe55
hwrng: virtio - don't wait on cleanup
|
|
WARNING in corrupted
|
-1 |
syz, C |
|
done |
3 |
1170d |
1284d
|
3/3 |
1097d |
784a8027b8ac
media: usb: siano: Fix warning due to null work_func_t function pointer
|
|
WARNING in usbnet_start_xmit/usb_submit_urb
|
-1 |
syz, C |
|
done |
2 |
1172d |
1228d
|
3/3 |
1097d |
5e1627cb43dd
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
|
UBSAN: shift-out-of-bounds in dbFree
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1181d |
1243d
|
3/3 |
1100d |
de984faecddb
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
WARNING in nilfs_btree_assign
|
-1 |
syz, C |
|
done |
26 |
1192d |
1267d
|
3/3 |
1140d |
b12011cea56b
nilfs2: fix buffer corruption due to concurrent device reads
|
|
BUG: unable to handle kernel paging request in ext4_acquire_dquot
origin:lts-only
|
8 |
syz, C |
|
done |
2 |
1193d |
1228d
|
3/3 |
1146d |
32c2f51fffec
quota: Properly disable quotas when add_dquot_ref() fails
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e
origin:lts-only
|
10 |
syz, C |
|
done |
8 |
1197d |
1282d
|
3/3 |
1149d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
WARNING in nilfs_segctor_do_construct
|
-1 |
syz, C |
|
done |
2 |
1203d |
1224d
|
3/3 |
1161d |
4357336192ed
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
|
possible deadlock in ext4_xattr_set_handle
|
4 |
syz, C |
|
done |
42 |
1204d |
1296d
|
3/3 |
1164d |
bdbfbb7d5057
ext4: add EA_INODE checking to ext4_iget()
|
|
general protection fault in gfs2_evict_inode
|
8 |
syz, C |
|
done |
4 |
1208d |
1259d
|
3/3 |
1174d |
504a10d9e46b
gfs2: Don't deref jdesc in evict
|
|
WARNING: bad unlock balance in l2cap_bredr_sig_cmd
origin:lts-only
|
4 |
syz, C |
|
done |
5 |
1219d |
1251d
|
3/3 |
1185d |
116b9c002c89
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
possible deadlock in sys_quotactl_fd
origin:upstream
|
4 |
syz, C |
|
done |
167 |
1219d |
1268d
|
3/3 |
1185d |
1de53f2223eb
ext4: fix lockdep warning when enabling MMP
|
|
WARNING: bad unlock balance in l2cap_recv_frame
origin:lts-only
|
4 |
syz, C |
|
done |
5 |
1219d |
1242d
|
3/3 |
1185d |
116b9c002c89
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
|
WARNING in hfsplus_cat_write_inode
origin:lts-only
|
-1 |
syz, C |
|
done |
9 |
1221d |
1282d
|
3/3 |
1185d |
37cab61a52d6
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
|
WARNING: ODEBUG bug in __do_softirq
origin:lts-only
|
-1 |
syz, C |
|
done |
1 |
1226d |
1228d
|
3/3 |
1196d |
cff0af3d1364
net/sched: sch_ingress: Only create under TC_H_INGRESS
|
|
kernel BUG in end_page_writeback
origin:lts-only
|
-1 |
syz, C |
|
done |
6 |
1236d |
1285d
|
3/3 |
1204d |
5cdb422c8391
f2fs: fix to avoid use-after-free for cached IPU bio
|
|
BUG: unable to handle kernel paging request in sctp_outq_tail
|
8 |
syz, C |
|
done |
2 |
1264d |
1295d
|
3/3 |
1232d |
667eb99cf7c1
sctp: check send stream number after wait_for_sndbuf
|
|
BUG: unable to handle kernel paging request in io_arm_poll_handler
|
8 |
syz, C |
|
done |
11 |
1282d |
1292d
|
3/3 |
1245d |
f4ba55411cc8
io_uring: avoid null-ptr-deref in io_arm_poll_handler
|
|
WARNING: refcount bug in qrtr_node_lookup
|
13 |
syz, C |
|
done |
1 |
1287d |
1287d
|
3/3 |
1256d |
b9ba5906c420
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
|
KASAN: use-after-free Read in hfsplus_releasepage
|
19 |
syz, C |
|
done |
1 |
1294d |
1294d
|
3/3 |
1261d |
05103d88482d
fs: hfsplus: fix UAF issue in hfsplus_put_super
|
|
possible deadlock in l2tp_tunnel_register
|
4 |
syz, C |
|
done |
41 |
1294d |
1296d
|
3/3 |
1261d |
9ca5e7ecab06
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
|