KASAN: use-after-free Read in try_to_wake_up
origin:upstream
missing-backport
|
C |
|
done |
44 |
49d |
481d
|
3/3 |
4d18h |
1c3844c5f4ea
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
kernel BUG in submit_bh_wbc
origin:lts-only
|
C |
|
done |
19 |
50d |
479d
|
3/3 |
6d20h |
46b832e09d43
nilfs2: fix failure to detect DAT corruption in btree and direct mappings
|
possible deadlock in scheduler_tick
origin:upstream
missing-backport
|
C |
|
done |
237 |
70d |
129d
|
3/3 |
30d |
6693b172f008
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
kernel BUG in ipgre_header
origin:upstream
|
C |
|
error |
5 |
92d |
252d
|
3/3 |
32d |
19554aa901b5
bonding: stop the device in bond_setup_by_slave()
|
WARNING in vmk80xx_write_packet/usb_submit_urb
origin:upstream
|
C |
|
done |
1 |
96d |
130d
|
3/3 |
60d |
ac882d6b21bf
comedi: vmk80xx: fix incomplete endpoint checking
|
WARNING in gre_tap_xmit
origin:upstream
|
C |
|
done |
2 |
98d |
98d
|
3/3 |
63d |
39a055e607cb
net l2tp: drop flow hash on forward
|
possible deadlock in rcu_report_exp_cpu_mult
|
C |
|
done |
7 |
107d |
132d
|
3/3 |
71d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
WARNING in sock_map_unref
|
C |
|
done |
18 |
107d |
110d
|
3/3 |
72d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
BUG: soft lockup in sys_sendmsg (2)
origin:upstream
|
C |
|
done |
1 |
111d |
111d
|
3/3 |
72d |
3fe79b2c8346
batman-adv: Avoid infinite loop trying to resize local TT
|
possible deadlock in swake_up_one
|
C |
|
done |
1 |
110d |
110d
|
3/3 |
72d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
possible deadlock in __hrtimer_run_queues (2)
|
C |
|
done |
2 |
108d |
115d
|
3/3 |
78d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
possible deadlock in unix_notinflight
|
C |
|
done |
1 |
109d |
109d
|
3/3 |
78d |
84a352b7eba1
af_unix: Clear stale u->oob_skb.
|
WARNING in __mod_timer
|
C |
|
done |
1 |
119d |
119d
|
3/3 |
88d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
possible deadlock in try_to_wake_up
|
C |
|
done |
1 |
121d |
121d
|
3/3 |
88d |
a44770fed865
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
origin:upstream
|
C |
|
done |
1 |
140d |
171d
|
3/3 |
109d |
f175de546a3e
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
WARNING in ieee80211_bss_info_change_notify
|
C |
|
done |
442 |
144d |
506d
|
3/3 |
113d |
930e826962d9
wifi: nl80211: reject iftype change with mesh ID change
|
BUG: unable to handle kernel paging request in bit_putcs
|
C |
|
done |
4 |
145d |
341d
|
3/3 |
115d |
2f91a96b892f
fbcon: always restore the old font data in fbcon_do_set_font()
|
KASAN: slab-out-of-bounds Read in ntfs_listxattr
|
C |
|
done |
52 |
148d |
486d
|
3/3 |
115d |
6ed6cdbe8833
fs/ntfs3: Fix oob in ntfs_listxattr
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
origin:upstream
|
C |
|
done |
1 |
163d |
163d
|
3/3 |
130d |
4588b13abcbd
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
UBSAN: array-index-out-of-bounds in diNewExt
origin:lts-only
|
C |
|
done |
2 |
185d |
185d
|
3/3 |
144d |
efdd665ce1a1
drm/amd/display: Implement bounds check for stream encoder creation in DCN301
|
possible deadlock in hci_rfkill_set_block
|
C |
|
done |
1032 |
207d |
275d
|
3/3 |
169d |
fc6471510582
Bluetooth: Fix deadlock in vhci_send_frame
|
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh
origin:upstream
|
C |
|
done |
1 |
218d |
218d
|
3/3 |
188d |
803fb6109fcf
bpf: fix precision backtracking instruction iteration
|
general protection fault in __unmap_hugepage_range_final
origin:upstream
|
C |
|
done |
13 |
228d |
267d
|
3/3 |
197d |
574a6db80f3e
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
WARNING in fib6_add
|
C |
|
done |
2 |
228d |
395d
|
3/3 |
197d |
a3f5de10b5cf
ipv6: fix potential NULL deref in fib6_add()
|
WARNING in __kernel_write_iter
origin:upstream
|
C |
|
done |
224 |
236d |
494d
|
3/3 |
205d |
4fc9c61c02c0
btrfs: send: ensure send_fd is writable
|
WARNING in lookup_inline_extent_backref
origin:upstream
|
C |
|
done |
2 |
238d |
405d
|
3/3 |
207d |
56f762659a5e
btrfs: do not allow non subvolume root targets for snapshot
|
WARNING in nilfs_sufile_set_segment_usage
origin:upstream
|
C |
|
done |
4 |
255d |
502d
|
3/3 |
221d |
3907e9cc85ff
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
|
KASAN: use-after-free Read in unix_stream_read_actor
origin:lts-only
|
C |
|
done |
1 |
254d |
258d
|
3/3 |
221d |
d179189eec42
af_unix: fix use-after-free in unix_stream_read_actor()
|
WARNING in __alloc_skb
origin:upstream
|
C |
|
done |
2 |
261d |
261d
|
3/3 |
228d |
ab3e13b35c1a
ppp: limit MRU to 64K
|
WARNING in imon_probe
origin:upstream
|
syz |
|
done |
2 |
340d |
409d
|
3/3 |
234d |
b083aaf5db2e
media: imon: fix access to invalid resource for the second interface
|
WARNING in inet_csk_get_port
origin:upstream
|
C |
|
done |
11 |
282d |
311d
|
3/3 |
249d |
8b9c79c0ecd2
tcp: Fix listen() warning with v4-mapped-v6 address.
|
KASAN: use-after-free Read in diFree
origin:lts-only
|
C |
|
done |
7 |
302d |
463d
|
3/3 |
270d |
4de3a603010e
jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
|
possible deadlock in f2fs_getxattr
origin:upstream
missing-backport
|
C |
|
done |
1043 |
311d |
369d
|
3/3 |
276d |
980b592c6087
f2fs: avoid false alarm of circular locking
|
UBSAN: array-index-out-of-bounds in f2fs_iget
origin:upstream
|
C |
|
done |
1 |
341d |
341d
|
3/3 |
290d |
0d545a8e77cb
Revert "f2fs: fix to do sanity check on extent cache correctly"
|
WARNING in bpf_xdp_adjust_tail
|
C |
|
done |
238 |
345d |
507d
|
3/3 |
291d |
20acffcdc2b7
net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
|
WARNING in sta_info_insert_rcu
origin:upstream
|
C |
|
done |
1 |
348d |
348d
|
3/3 |
295d |
676a42341013
wifi: cfg80211: reject auth/assoc to AP with our address
|
KASAN: null-ptr-deref Write in get_block
origin:upstream
missing-backport
|
C |
|
done |
4 |
358d |
403d
|
3/3 |
298d |
1416eebaad80
fs/sysv: Null check to prevent null-ptr-deref bug
|
UBSAN: shift-out-of-bounds in dbUpdatePMap
origin:upstream
|
C |
|
done |
1 |
369d |
410d
|
3/3 |
303d |
c7feb54b1138
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
WARNING in corrupted
|
C |
|
done |
3 |
376d |
495d
|
3/3 |
303d |
8abb53c5167c
media: usb: siano: Fix warning due to null work_func_t function pointer
|
WARNING in usbnet_start_xmit/usb_submit_urb
origin:lts-only
|
C |
|
done |
2 |
370d |
441d
|
3/3 |
303d |
1bebbd9b8037
net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
|
WARNING in smsusb_start_streaming
|
C |
|
done |
1 |
373d |
373d
|
3/3 |
303d |
8abb53c5167c
media: usb: siano: Fix warning due to null work_func_t function pointer
|
WARNING in smsusb_term_device
|
C |
|
done |
131 |
374d |
495d
|
3/3 |
303d |
8abb53c5167c
media: usb: siano: Fix warning due to null work_func_t function pointer
|
BUG: unable to handle kernel NULL pointer dereference in indx_find
origin:lts-only
|
C |
|
done |
3 |
379d |
499d
|
3/3 |
303d |
000a9a72efa4
fs/ntfs3: Check fields while reading
|
UBSAN: shift-out-of-bounds in dbFree
origin:upstream
|
C |
|
done |
1 |
387d |
451d
|
3/3 |
307d |
c7feb54b1138
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
UBSAN: array-index-out-of-bounds in xtSearch
origin:upstream
|
C |
|
done |
3 |
384d |
461d
|
3/3 |
307d |
f27f759f4cd4
jfs: validate max amount of blocks before allocation.
|
INFO: rcu detected stall in sock_close
origin:upstream
|
C |
|
done |
1 |
382d |
382d
|
3/3 |
307d |
0b45af982a4d
net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
|
WARNING in btrfs_remove_chunk
origin:lts-only
|
C |
|
done |
10 |
393d |
484d
|
3/3 |
311d |
9628d45a0667
btrfs: scrub: reject unsupported scrub flags
|
KASAN: use-after-free Read in gsm_cleanup_mux
|
C |
|
done |
4 |
394d |
460d
|
3/3 |
319d |
31311a9a4baa
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e
origin:upstream
missing-backport
|
C |
|
done |
23 |
396d |
492d
|
3/3 |
322d |
000a9a72efa4
fs/ntfs3: Check fields while reading
|
BUG: unable to handle kernel paging request in sctp_outq_tail
origin:lts-only
|
C |
|
done |
2 |
399d |
505d
|
3/3 |
340d |
d2128636b303
sctp: check send stream number after wait_for_sndbuf
|
possible deadlock in static_key_slow_inc
|
C |
|
done |
1908 |
394d |
507d
|
3/3 |
345d |
0d7a4e6589a0
cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}()
|
kernel BUG in btrfs_global_root_insert
|
C |
|
done |
5 |
404d |
473d
|
3/3 |
354d |
4389fb6b6a9d
btrfs: do not ASSERT() on duplicated global roots
|
kernel BUG in btrfs_global_root_delete
|
C |
|
done |
6 |
405d |
472d
|
3/3 |
360d |
4389fb6b6a9d
btrfs: do not ASSERT() on duplicated global roots
|
BUG: soft lockup in addrconf_rs_timer
|
C |
|
done |
26 |
409d |
421d
|
3/3 |
362d |
1d37434ffc13
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
WARNING in nilfs_segctor_do_construct
|
C |
|
done |
2 |
410d |
439d
|
3/3 |
366d |
69caea4eed1c
nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
|
BUG: soft lockup in fq_pie_timer
|
C |
|
done |
7 |
412d |
420d
|
3/3 |
370d |
1d37434ffc13
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
possible deadlock in ext4_xattr_set_handle
|
C |
|
done |
15 |
415d |
502d
|
3/3 |
375d |
b112babc565e
ext4: add EA_INODE checking to ext4_iget()
|
kernel BUG in __phys_addr
|
C |
|
done |
2 |
413d |
444d
|
3/3 |
375d |
a8eaa9a06add
fs/ntfs3: Validate MFT flags before replaying logs
|
BUG: soft lockup in tc_modify_qdisc
origin:upstream
|
C |
|
done |
1 |
418d |
418d
|
3/3 |
382d |
1d37434ffc13
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
INFO: task hung in usbdev_open
origin:lts-only
|
C |
|
done |
3 |
425d |
482d
|
3/3 |
394d |
d5dba4b7bf90
USB: sisusbvga: Add endpoint checks
|
WARNING in hfsplus_cat_write_inode
origin:lts-only
|
C |
|
done |
9 |
430d |
489d
|
3/3 |
396d |
48960a503fce
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
WARNING in hfsplus_cat_read_inode
origin:lts-only
|
C |
|
done |
24 |
429d |
470d
|
3/3 |
396d |
48960a503fce
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
|
WARNING: bad unlock balance in l2cap_disconnect_rsp
origin:lts-only
|
C |
|
done |
37 |
429d |
463d
|
3/3 |
396d |
fd269a0435f8
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
WARNING: bad unlock balance in l2cap_recv_frame
origin:lts-only
|
C |
|
done |
22 |
432d |
463d
|
3/3 |
396d |
fd269a0435f8
Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
|
KASAN: slab-out-of-bounds Read in xfs_btree_lookup_get_block
origin:lts-only
|
C |
|
done |
1 |
432d |
432d
|
3/3 |
401d |
a2961463d74f
xfs: verify buffer contents when we skip log replay
|
possible deadlock in ext4_multi_mount_protect
origin:upstream
|
C |
|
done |
165 |
436d |
479d
|
3/3 |
403d |
19fb73b8eaef
ext4: fix lockdep warning when enabling MMP
|
WARNING in __virt_to_phys
origin:lts-only
|
C |
|
done |
1 |
435d |
442d
|
3/3 |
403d |
a8eaa9a06add
fs/ntfs3: Validate MFT flags before replaying logs
|
WARNING in kvfree
|
C |
|
done |
3 |
446d |
483d
|
3/3 |
415d |
c5fa4eedddd1
ext4: fix invalid free tracking in ext4_xattr_move_to_block()
|
WARNING in ath6kl_htc_pipe_rx_complete
|
C |
|
done |
1 |
453d |
453d
|
3/3 |
421d |
644df7e865e7
wifi: ath6kl: reduce WARN to dev_dbg() in callback
|
WARNING in split_huge_page_to_list
|
C |
|
done |
140 |
457d |
502d
|
3/3 |
423d |
e8a7bdb6f76c
mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO
|
possible deadlock in blkcg_deactivate_policy
|
C |
|
done |
168 |
458d |
504d
|
3/3 |
423d |
b5dae1cd0d83
Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
|
general protection fault in io_poll_remove_entries
|
C |
|
done |
21 |
481d |
500d
|
3/3 |
451d |
3eb2138d4693
io_uring/poll: clear single/double poll flags on poll arming
|
WARNING in ip6erspan_tunnel_xmit
|
C |
|
done |
1 |
493d |
493d
|
3/3 |
463d |
9c7d6803689c
erspan: do not use skb_mac_header() in ndo_start_xmit()
|
WARNING: refcount bug in qrtr_node_lookup
|
C |
|
done |
1 |
498d |
498d
|
3/3 |
466d |
aa95efa187b4
net: qrtr: Fix a refcount bug in qrtr_recvmsg()
|
possible deadlock in l2tp_tunnel_register
|
C |
|
done |
44 |
504d |
507d
|
3/3 |
472d |
4bb736b40475
l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()
|
WARNING in fscrypt_destroy_keyring
|
C |
|
done |
1 |
503d |
503d
|
3/3 |
472d |
d77531fac6a1
fscrypt: destroy keyring after security_sb_delete()
|
possible deadlock in throtl_pending_timer_fn
|
C |
|
done |
266 |
503d |
504d
|
3/3 |
472d |
b5dae1cd0d83
Revert "blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and blkcg_deactivate_policy()"
|
KASAN: use-after-free Read in hfsplus_release_folio
|
C |
|
done |
2 |
505d |
505d
|
3/3 |
472d |
0c80bef0b7d2
fs: hfsplus: fix UAF issue in hfsplus_put_super
|