|
INFO: task hung in i2c_tiny_usb_disconnect
origin:upstream
|
1 |
syz, C |
|
done |
1 |
55d |
88d
|
3/3 |
2d07h |
1f1bcd4eca6c
i2c: core: fix debugfs UAF on adapter removal
|
|
WARNING in firmware_fallback_sysfs
origin:upstream
missing-backport
|
-1 |
syz, C |
|
error |
256 |
104d |
1320d
|
3/3 |
104d |
bbfedc847140
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
|
|
BUG: unable to handle kernel paging request in bcsp_recv
origin:upstream
missing-backport
|
8 |
syz, C |
|
done |
19 |
338d |
557d
|
3/3 |
298d |
ca94b2b036c2
Bluetooth: bcsp: receive data only if registered
|
|
kernel panic: stack is corrupted in __schedule (3)
origin:upstream
missing-backport
|
2 |
syz, C |
|
done |
5 |
438d |
543d
|
3/3 |
401d |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
UBSAN: shift-out-of-bounds in pcl812_attach
origin:upstream
|
-1 |
syz, C |
|
done |
11 |
470d |
480d
|
3/3 |
434d |
b14b076ce593
comedi: pcl812: Fix bit shift out of bounds
|
|
WARNING in comedi_unlocked_ioctl
origin:upstream
|
-1 |
syz, C |
|
done |
13 |
471d |
482d
|
3/3 |
436d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
general protection fault in mcp_i2c_xfer
origin:upstream
missing-backport
|
2 |
syz, C |
|
done |
32 |
473d |
587d
|
3/3 |
441d |
f2d4a5834638
HID: mcp2221: Set driver data before I2C adapter add
|
|
WARNING in format_decode
origin:upstream
|
-1 |
syz, C |
|
done |
314 |
481d |
1083d
|
3/3 |
450d |
f8242745871f
bpf: Reject %p% format string in bprintf-like helpers
|
|
WARNING in dib0700_i2c_xfer/usb_submit_urb
origin:upstream
|
-1 |
syz, C |
|
done |
3 |
506d |
512d
|
3/3 |
472d |
270aa0106206
mm/uffd: fix vma operation where start addr cuts part of vma
|
|
WARNING in ext4_iomap_begin (2)
origin:upstream
|
-1 |
syz, C |
|
done |
10 |
507d |
592d
|
3/3 |
476d |
1a77a028a392
ext4: ensure i_size is smaller than maxbytes
|
|
possible deadlock in ocfs2_finish_quota_recovery
origin:upstream
|
4 |
syz, C |
|
done |
12 |
549d |
643d
|
3/3 |
517d |
fcaf3b2683b0
ocfs2: stop quota recovery before disabling quotas
|
|
WARNING in plfxlc_mac_release
origin:upstream
missing-backport
|
-1 |
syz, C |
|
inconclusive |
2 |
550d |
660d
|
3/3 |
545d |
93d646911be1
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
|
|
UBSAN: shift-out-of-bounds in extAlloc
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
204 |
570d |
1333d
|
3/3 |
552d |
a779ed754e52
jfs: define xtree root and page independently
|
|
WARNING in ar5523_submit_rx_cmd/usb_submit_urb
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
7 |
633d |
1284d
|
3/3 |
598d |
34f7ebff1b96
wifi: ar5523: enable proper endpoint verification
|
|
possible deadlock in team_port_change_check
origin:upstream
|
4 |
syz, C |
|
done |
61 |
631d |
948d
|
3/3 |
598d |
adff6ac889e1
team: prevent adding a device which is already a team device lower
|
|
kernel BUG in close_ctree
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
622 |
666d |
1334d
|
3/3 |
633d |
902806baf3c1
drm/bridge: adv7511_audio: Update Audio InfoFrame properly
|
|
divide error in drm_mode_debug_printmodeline
origin:upstream
|
2 |
syz, C |
|
done |
1 |
683d |
1147d
|
3/3 |
645d |
69fbb01e8917
drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
|
|
WARNING in inet_sock_destruct
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
631 |
690d |
1303d
|
3/3 |
647d |
ca70b8baf2bd
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
|
|
WARNING: locking bug in ext4_move_extents
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1248 |
691d |
1245d
|
3/3 |
652d |
be063ffa28bc
locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()
|
|
KASAN: slab-out-of-bounds Read in ea_get
origin:upstream
missing-backport
|
17 |
syz, C |
|
done |
5 |
694d |
1252d
|
3/3 |
653d |
d9f9d96136cb
jfs: xattr: check invalid xattr size more strictly
|
|
INFO: rcu detected stall in sys_newfstatat
origin:upstream
|
1 |
syz, C |
|
done |
8 |
698d |
1236d
|
3/3 |
655d |
d77278196441
devlink: bump the instance index directly when iterating
|
|
WARNING in media_create_pad_link
origin:upstream
|
-1 |
syz, C |
|
error |
2 |
794d |
1326d
|
3/3 |
690d |
19464d732252
media: uvcvideo: Require entities to have a non-zero unique ID
|
|
BUG: unable to handle kernel NULL pointer dereference in lookup_one_unlocked
origin:upstream
|
10 |
syz, C |
|
|
2 |
718d |
718d
|
3/3 |
690d |
ff43d008bbf9
ovl: Filter invalid inodes with missing lookup function
|
|
SYZFAIL: tun: can't open /dev/net/tun
origin:upstream
|
-1 |
syz |
|
done |
1 |
766d |
1071d
|
3/3 |
734d |
d77278196441
devlink: bump the instance index directly when iterating
|
|
kernel BUG in jbd2_cleanup_journal_tail
origin:upstream
|
-1 |
syz, C |
|
done |
9 |
768d |
779d
|
3/3 |
738d |
82dfdd1e31e7
ocfs2: fix null-ptr-deref when journal load failed.
|
|
INFO: task hung in ext4_quota_write
origin:upstream
missing-backport
|
1 |
syz, C |
|
done |
9 |
804d |
1044d
|
3/3 |
758d |
0752e7fb549d
ext4: do not create EA inode under buffer lock
|
|
possible deadlock in hfsplus_file_extend
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
2760 |
824d |
1333d
|
3/3 |
788d |
c11c3a4524be
hfsplus: fix to avoid false alarm of circular locking
|
|
WARNING in skb_checksum_help
origin:upstream
missing-backport
|
-1 |
syz, C |
|
done |
2523 |
828d |
1246d
|
3/3 |
793d |
e269d79c7d35
net: missing check virtio
|
|
possible deadlock in rds_wake_sk_sleep
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1 |
830d |
1242d
|
3/3 |
793d |
2c66293a452c
net:rds: Fix possible deadlock in rds_message_put
|
|
WARNING in __xdp_reg_mem_model
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
861d |
933d
|
3/3 |
821d |
7e9f79428372
xdp: Remove WARN() from __xdp_reg_mem_model()
|
|
possible deadlock in console_emit_next_record
origin:upstream
|
4 |
syz, C |
|
done |
38 |
863d |
1065d
|
3/3 |
822d |
ff9105993240
bpf, sockmap: Prevent lock inversion deadlock in map delete elem
|
|
WARNING: lock held when returning to user space in f2fs_write_single_data_page
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1 |
1051d |
1255d
|
3/3 |
831d |
f2ba11ba9325
f2fs: avoid dead loop in f2fs_issue_checkpoint()
|
|
KASAN: use-after-free Read in try_to_wake_up
origin:upstream
missing-backport
|
19 |
syz, C |
|
done |
44 |
881d |
1313d
|
3/3 |
836d |
1c3844c5f4ea
nilfs2: fix potential hang in nilfs_detach_log_writer()
|
|
possible deadlock in scheduler_tick
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
237 |
901d |
960d
|
3/3 |
862d |
6693b172f008
bpf: Allow delete from sockmap/sockhash only if update is allowed
|
|
kernel BUG in ipgre_header
origin:upstream
|
-1 |
syz, C |
|
error |
5 |
923d |
1083d
|
3/3 |
863d |
3cffa2ddc4d3
bonding: stop the device in bond_setup_by_slave()
|
|
WARNING in vmk80xx_write_packet/usb_submit_urb
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
928d |
961d
|
3/3 |
892d |
d1718530e3f6
comedi: vmk80xx: fix incomplete endpoint checking
|
|
WARNING in gre_tap_xmit
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
929d |
930d
|
3/3 |
895d |
42f853b42899
net l2tp: drop flow hash on forward
|
|
BUG: soft lockup in sys_sendmsg (2)
origin:upstream
|
1 |
syz, C |
|
done |
1 |
942d |
942d
|
3/3 |
904d |
b1f532a3b1e6
batman-adv: Avoid infinite loop trying to resize local TT
|
|
BUG: unable to handle kernel paging request in bpf_probe_read_kernel_str
origin:upstream
|
8 |
syz, C |
|
done |
1 |
972d |
1002d
|
3/3 |
941d |
32019c659ecf
x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault()
|
|
BUG: unable to handle kernel NULL pointer dereference in sk_psock_verdict_data_ready
origin:upstream
|
10 |
syz, C |
|
done |
1 |
995d |
995d
|
3/3 |
962d |
4588b13abcbd
bpf, sockmap: Fix NULL pointer dereference in sk_psock_verdict_data_ready()
|
|
UBSAN: shift-out-of-bounds in scalar32_min_max_arsh
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1050d |
1050d
|
3/3 |
1020d |
4bb7ea946a37
bpf: fix precision backtracking instruction iteration
|
|
general protection fault in __unmap_hugepage_range_final
origin:upstream
|
2 |
syz, C |
|
done |
13 |
1060d |
1099d
|
3/3 |
1029d |
574a6db80f3e
hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write
|
|
WARNING in __kernel_write_iter
origin:upstream
|
-1 |
syz, C |
|
done |
224 |
1068d |
1326d
|
3/3 |
1037d |
0ac1d13a55eb
btrfs: send: ensure send_fd is writable
|
|
WARNING in lookup_inline_extent_backref
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
1069d |
1237d
|
3/3 |
1039d |
a8892fd71933
btrfs: do not allow non subvolume root targets for snapshot
|
|
WARNING in nilfs_sufile_set_segment_usage
origin:upstream
|
-1 |
syz, C |
|
done |
4 |
1087d |
1333d
|
3/3 |
1053d |
675abf8df135
nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
|
|
WARNING in __alloc_skb
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
1092d |
1092d
|
3/3 |
1060d |
c0a2a1b0d631
ppp: limit MRU to 64K
|
|
WARNING in imon_probe
origin:upstream
|
-1 |
syz |
|
done |
2 |
1172d |
1241d
|
3/3 |
1066d |
a1766a4fd83b
media: imon: fix access to invalid resource for the second interface
|
|
WARNING in inet_csk_get_port
origin:upstream
|
-1 |
syz, C |
|
done |
11 |
1114d |
1143d
|
3/3 |
1081d |
8b9c79c0ecd2
tcp: Fix listen() warning with v4-mapped-v6 address.
|
|
possible deadlock in f2fs_getxattr
origin:upstream
missing-backport
|
4 |
syz, C |
|
done |
1043 |
1143d |
1201d
|
3/3 |
1108d |
980b592c6087
f2fs: avoid false alarm of circular locking
|
|
UBSAN: array-index-out-of-bounds in f2fs_iget
origin:upstream
|
15 |
syz, C |
|
done |
1 |
1172d |
1172d
|
3/3 |
1121d |
0d545a8e77cb
Revert "f2fs: fix to do sanity check on extent cache correctly"
|
|
WARNING in sta_info_insert_rcu
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1180d |
1180d
|
3/3 |
1127d |
676a42341013
wifi: cfg80211: reject auth/assoc to AP with our address
|
|
KASAN: null-ptr-deref Write in get_block
origin:upstream
missing-backport
|
12 |
syz, C |
|
done |
4 |
1190d |
1235d
|
3/3 |
1130d |
1416eebaad80
fs/sysv: Null check to prevent null-ptr-deref bug
|
|
UBSAN: shift-out-of-bounds in dbUpdatePMap
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1201d |
1242d
|
3/3 |
1134d |
c7feb54b1138
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
UBSAN: shift-out-of-bounds in dbFree
origin:upstream
|
-1 |
syz, C |
|
done |
1 |
1219d |
1283d
|
3/3 |
1139d |
c7feb54b1138
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
|
|
UBSAN: array-index-out-of-bounds in xtSearch
origin:upstream
|
15 |
syz, C |
|
done |
3 |
1215d |
1292d
|
3/3 |
1139d |
f27f759f4cd4
jfs: validate max amount of blocks before allocation.
|
|
INFO: rcu detected stall in sock_close
origin:upstream
|
1 |
syz, C |
|
done |
1 |
1214d |
1214d
|
3/3 |
1139d |
e739718444f7
net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
|
|
BUG: unable to handle kernel NULL pointer dereference in hdr_find_e
origin:upstream
missing-backport
|
10 |
syz, C |
|
done |
23 |
1228d |
1324d
|
3/3 |
1154d |
0e8235d28f3a
fs/ntfs3: Check fields while reading
|
|
BUG: soft lockup in tc_modify_qdisc
origin:upstream
|
1 |
syz, C |
|
done |
1 |
1250d |
1250d
|
3/3 |
1214d |
cd2b8113c2e8
net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
|
|
possible deadlock in ext4_multi_mount_protect
origin:upstream
|
4 |
syz, C |
|
done |
165 |
1268d |
1310d
|
3/3 |
1235d |
19fb73b8eaef
ext4: fix lockdep warning when enabling MMP
|