|
general protection fault in f_midi2_free_ep
origin:upstream
|
2 |
syz, C |
|
done |
7 |
51d |
97d
|
2/2 |
7h31m |
51ddc55c7508
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
|
|
KASAN: slab-use-after-free Write in config_item_get
origin:lts-only
|
22 |
syz, C |
|
done |
1 |
51d |
82d
|
2/2 |
1d20h |
b315d8656607
configfs: unhash the dentry before dropping the item in rmdir
|
|
general protection fault in f_midi2_stop_eps
origin:upstream
|
2 |
syz, C |
|
done |
32 |
53d |
97d
|
2/2 |
4d12h |
51ddc55c7508
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
|
|
possible deadlock in __dev_queue_xmit (2)
|
4 |
syz, C |
|
done |
28 |
58d |
67d
|
2/2 |
11d |
524323f52cbf
net/sched: Fix mirred deadlock on device recursion
|
|
WARNING in spcp8x5_get_msr
|
-1 |
syz, C |
|
done |
6 |
62d |
62d
|
2/2 |
17d |
8e987c4daf4f
USB: serial: spcp8x5: drop broken carrier detect support
|
|
WARNING in rt_cache_route
|
-1 |
syz, C |
|
done |
74 |
82d |
88d
|
2/2 |
49d |
d94b82d452ca
rxrpc: Fix irq-disabled in local_bh_enable()
|
|
UBSAN: array-index-out-of-bounds in snd_dummy_probe
origin:upstream
|
15 |
syz, C |
|
done |
3 |
82d |
87d
|
2/2 |
50d |
b20eb7ecbdaa
ALSA: dummy: Check card index validity at probe
|
|
possible deadlock in ocfs2_evict_inode
origin:lts-only
|
4 |
syz, C |
|
done |
100 |
102d |
487d
|
2/2 |
67d |
49b34bd3ad69
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
|
|
kernel BUG in ocfs2_truncate_file
|
-1 |
syz, C |
|
done |
6 |
110d |
158d
|
2/2 |
74d |
ecb3f9386f43
ocfs2: fix buffer head management in ocfs2_read_blocks()
|
|
WARNING in igorplugusb_probe/usb_submit_urb
origin:lts-only
|
-1 |
syz, C |
|
done |
68 |
134d |
166d
|
2/2 |
102d |
060fca8e0983
media: rc: igorplugusb: fix control request setup packet
|
|
inconsistent lock state in valid_state
origin:upstream
|
4 |
syz, C |
|
done |
19 |
155d |
195d
|
2/2 |
123d |
8420aa490041
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
KASAN: slab-use-after-free Read in xfs_inode_item_push
|
19 |
|
|
|
1 |
276d |
276d
|
2/2 |
207d |
7121b22b0bac
xfs: avoid dereferencing log items after push callbacks
75669e987137
xfs: save ailp before dropping the AIL lock in push callbacks
d38135af04a3
xfs: stop reclaim before pushing AIL during unmount
|
|
BUG: Bad page state in z_erofs_do_read_page
origin:lts-only
|
-1 |
syz, C |
|
inconclusive |
3004 |
207d |
497d
|
2/2 |
207d |
cfadf46a67b6
erofs: fix "BUG: Bad page state in z_erofs_do_read_page"
|
|
WARNING in subflow_data_ready
origin:upstream
|
-1 |
syz, C |
|
done |
13 |
321d |
324d
|
2/2 |
287d |
86730ac255b0
mptcp: ensure context reset on disconnect()
|
|
INFO: rcu detected stall in sys_clone
|
1 |
syz, C |
|
done |
8 |
359d |
444d
|
2/2 |
328d |
b41642c87716
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
|
|
KASAN: slab-use-after-free Read in hdm_disconnect
|
19 |
syz, C |
|
done |
62 |
366d |
485d
|
2/2 |
333d |
4b1270902609
most: usb: Fix use-after-free in hdm_disconnect
|
|
WARNING in ni_rename
origin:upstream
|
-1 |
syz, C |
|
done |
15 |
368d |
441d
|
2/2 |
338d |
978aac54e93e
fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
|
|
WARNING in ext4_xattr_block_set
|
-1 |
syz, C |
|
done |
23 |
386d |
409d
|
2/2 |
350d |
720a66fdaa6c
ext4: validate ea_ino and size in check_xattrs
|
|
KASAN: slab-use-after-free Read in xfrm_alloc_spi
origin:upstream
|
19 |
syz, C |
|
done |
204 |
393d |
428d
|
2/2 |
352d |
0baf92d0b159
xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
|
|
WARNING: lock held when returning to user space in loop_set_block_size
origin:lts-only
|
4 |
syz, C |
|
done |
100 |
401d |
428d
|
2/2 |
359d |
42a6aeb4b238
Revert "loop: Avoid updating block size under exclusive owner"
|
|
WARNING in minix_unlink
origin:upstream
|
-1 |
syz, C |
|
done |
12 |
404d |
405d
|
2/2 |
365d |
73861970938a
minixfs: Verify inode mode when loading from disk
|
|
WARNING in inet_sock_destruct
origin:lts-only
|
-1 |
syz, C |
|
done |
3 |
410d |
410d
|
2/2 |
373d |
a3967baad4d5
tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
|
|
WARNING in kvm_arch_vcpu_ioctl_run
origin:upstream
|
-1 |
syz, C |
|
done |
2 |
412d |
412d
|
2/2 |
376d |
e750f8539128
KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
|
|
KASAN: slab-use-after-free Read in rose_transmit_link
origin:upstream
missing-backport
|
19 |
syz, C |
|
done |
43 |
423d |
483d
|
2/2 |
383d |
d860d1faa6b2
net: rose: convert 'use' field to refcount_t
|
|
INFO: rcu detected stall in perf_event_open
|
1 |
syz, C |
|
done |
4 |
428d |
442d
|
2/2 |
389d |
b41642c87716
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
|
|
INFO: rcu detected stall in perf_release
|
1 |
syz, C |
|
done |
1 |
429d |
429d
|
2/2 |
389d |
b41642c87716
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
|
|
UBSAN: shift-out-of-bounds in pcl726_attach
origin:upstream
|
-1 |
syz, C |
|
done |
17 |
428d |
456d
|
2/2 |
389d |
96cb948408b3
comedi: pcl726: Prevent invalid irq number
|
|
INFO: rcu detected stall in futex
origin:lts-only
|
1 |
syz, C |
|
done |
6 |
429d |
446d
|
2/2 |
389d |
b41642c87716
rcu: Fix rcu_read_unlock() deadloop due to IRQ work
|
|
kernel panic: stack is corrupted in __schedule
|
2 |
syz, C |
|
done |
2 |
430d |
499d
|
2/2 |
393d |
7375f22495e7
fs/buffer: fix use-after-free when call bh_read() helper
|
|
BUG: assuming non migratable context at include/linux/filter.h:LINE
|
-1 |
syz, C |
|
done |
163 |
441d |
472d
|
2/2 |
403d |
ee2502485702
bpf: Disable migration in nf_hook_run_bpf().
|
|
general protection fault in pick_link
origin:upstream
|
2 |
syz, C |
|
done |
2 |
446d |
446d
|
2/2 |
406d |
b35a50d639ca
fs/ntfs3: cancle set bad inode after removing name fails
|
|
general protection fault in hfs_find_init
origin:lts-only
|
2 |
syz, C |
|
done |
5 |
450d |
455d
|
2/2 |
406d |
736a0516a162
hfs: fix general protection fault in hfs_find_init()
|
|
WARNING in comedi_unlocked_ioctl
origin:upstream
|
-1 |
syz, C |
|
done |
9 |
463d |
476d
|
2/2 |
428d |
08ae4b20f5e8
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
|
|
WARNING in format_decode
|
-1 |
syz, C |
|
done |
36 |
475d |
493d
|
2/2 |
442d |
f8242745871f
bpf: Reject %p% format string in bprintf-like helpers
|