|
BUG: unable to handle kernel NULL pointer dereference in usb_stor_invoke_transport (2)
prio:high
usb
usb-storage
|
10 |
syz, C |
error |
|
12 |
12d |
32d
|
3/29 |
never |
usb: storage: ene_ub6250: set transport_reset to avoid NULL deref
|
|
general protection fault in f_midi2_stop_eps
prio:high
usb
|
2 |
syz, C |
error |
|
541 |
34d |
74d
|
27/29 |
never |
f0efaf187294
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
|
|
INFO: task hung in usbatm_usb_disconnect (2)
prio:high
usb
|
1 |
syz, C |
|
|
26 |
3d05h |
19d
|
3/29 |
never |
usb: atm: use request_firmware_direct() for firmware probing
|
|
UBSAN: shift-out-of-bounds in vcc_connect
prio:high
usb
net
|
-1 |
syz |
|
|
4 |
48d |
48d
|
27/29 |
never |
a60fd8c6dbaa
usb: atm: usbatm: fix invalid ci_range initialization
|
|
UBSAN: array-index-out-of-bounds in uea_bind
prio:high
usb
|
15 |
syz, C |
|
|
87 |
54d |
71d
|
27/29 |
never |
37a5e120118a
usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
|
|
WARNING in cxacru_cm/usb_submit_urb (3)
prio:high
usb
|
-1 |
syz, C |
|
|
86 |
58d |
71d
|
1/29 |
never |
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
|
|
KASAN: slab-use-after-free Read in cxacru_poll_status
prio:high
usb
|
19 |
syz |
|
|
19 |
57d |
71d
|
27/29 |
never |
b5b02ce65777
usb: atm: cxacru: fix use-after-free in cxacru_poll_status
|
|
WARNING in usb_stor_msg_common/usb_submit_urb
prio:high
usb
usb-storage
|
-1 |
syz, C |
error |
|
3349 |
19d |
650d
|
27/29 |
never |
445fc368c6bc
usb-storage: ene_ub6250: fix race between scan work and probe
|
|
KASAN: slab-use-after-free Write in keyspan_close
prio:high
usb
|
22 |
syz, C |
|
|
1 |
27d |
41d
|
24/29 |
never |
b48820de8c1a
tty: port: fix tty_port_tty_vhangup() race
|
|
KASAN: slab-use-after-free Write in usb_free_urb
prio:high
actionable
usb
|
22 |
syz, C |
|
|
10 |
29d |
70d
|
20/29 |
never |
402a9d6aab7a
ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
|
|
KASAN: slab-use-after-free Read in input_dev_uevent (2)
prio:high
usb
input
|
19 |
syz, C |
error |
|
23 |
11d |
62d
|
26/29 |
never |
0b7bd20f6379
ALSA: caiaq: unregister the input device when probe fails
|
|
KMSAN: uninit-value in steam_register
prio:high
usb
input
|
7 |
|
|
|
3 |
126d |
123d
|
27/29 |
never |
33ff7b49c38b
HID: steam: Reject short reads
|
|
memory leak in uss720_probe
prio:high
usb
|
3 |
syz, C |
|
|
3 |
60d |
86d
|
27/29 |
never |
15902712b9e2
USB: misc: uss720: Fix leak in get_1284_register
|
|
possible deadlock in digi_set_modem_signals
prio:high
usb
|
4 |
syz, C |
error |
|
14 |
46d |
71d
|
27/29 |
never |
177b48f840c7
USB: serial: digi_acceleport: add port lock nesting annotation
|
|
general protection fault in keyspan_break_ctl
prio:high
usb
|
8 |
syz, C |
|
|
43 |
7d11h |
44d
|
24/29 |
never |
ae0e61d95677
USB: serial: fix ioctl hangup race
|
|
KASAN: slab-use-after-free Read in usa49_glocont_callback
prio:high
actionable
usb
|
19 |
C |
|
|
7 |
16d |
58d
|
24/29 |
never |
33c920f7c595
USB: serial: fix port tear down use-after-free
|
|
WARNING in __drm_atomic_helper_set_config
prio:high
usb
dri
|
-1 |
syz, C |
|
|
19 |
22d |
71d
|
17/29 |
never |
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
|
|
WARNING in drm_property_add_enum
usb
dri
prio:high
|
-1 |
syz, C |
error |
|
271 |
33d |
55d
|
27/29 |
never |
500cb24cd61b
drm/gud: NUL-terminate TV mode names read from the device
|
|
WARNING in drm_plane_create_rotation_property
prio:high
usb
dri
|
-1 |
syz, C |
error |
|
12 |
31d |
51d
|
27/29 |
never |
cb732d027aa1
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
|
|
KASAN: slab-out-of-bounds Read in drm_property_add_enum
prio:high
usb
dri
|
17 |
syz, C |
error |
|
111 |
33d |
53d
|
27/29 |
never |
da1ea35fea67
drm/gud: validate TV mode names before creating enum property
|
|
KASAN: slab-use-after-free Read in hidraw_report_event
prio:high
input
usb
|
19 |
syz, C |
error |
|
4 |
166d |
166d
|
1/29 |
never |
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
|
|
KASAN: slab-use-after-free Read in lookup_noperm_common
prio:high
usb
fs
|
19 |
syz, C |
|
|
11 |
45d |
73d
|
27/29 |
never |
b15b548d52b4
i2c: core: fix debugfs UAF on adapter removal
|
|
WARNING in cx25840_init
prio:high
usb
media
|
-1 |
syz, C |
error |
|
21 |
16d |
37d
|
2/29 |
never |
media: cx25840: return -EOPNOTSUPP instead of WARN_ON in cx25840_init
|
|
KASAN: use-after-free Read in em28xx_close_extension (2)
prio:high
usb
media
|
19 |
syz, C |
error |
|
48 |
3d04h |
751d
|
27/29 |
never |
95f76f51937f
media: em28xx: defer audio-only extension registration
|
|
KASAN: use-after-free Read in em28xx_init_extension (2)
prio:high
usb
media
|
19 |
syz, C |
done |
|
1464 |
54d |
1655d
|
27/29 |
never |
826915b6b65e
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
|
|
KASAN: slab-use-after-free Read in __vb2_queue_cancel (2)
prio:high
usb
media
|
19 |
syz, C |
|
|
331 |
6d05h |
51d
|
2/29 |
never |
media: em28xx: setup queues before registering V4L2 device
|
|
WARNING in pvr2_send_request_ex/usb_submit_urb
prio:high
usb
pvrusb2
|
-1 |
syz, C |
error |
|
35 |
31d |
1860d
|
2/29 |
never |
media: pvrusb2: fix URB pending flag leak on invalid endpoint
|
|
BUG: sleeping function called from invalid context in mmc_free_host
prio:high
usb
mmc
|
5 |
syz, C |
error |
|
8754 |
37m |
66d
|
2/29 |
never |
mmc: vub300: Remove the driver for the obsolete HW
|
|
BUG: sleeping function called from invalid context in cancel_delayed_work_sync
prio:high
usb
mmc
|
10 |
syz, C |
|
|
51085 |
now |
66d
|
2/29 |
never |
mmc: vub300: Remove the driver for the obsolete HW
|
|
KMSAN: uninit-value in rtl8150_open (2)
prio:high
net
usb
|
7 |
|
|
|
5 |
131d |
200d
|
27/29 |
never |
8c9c5b9a6896
net: usb: rtl8150: handle link status read failures
|
|
KASAN: use-after-free Read in pn533_acr122_is_rx_frame_valid
prio:high
usb
nfc
|
19 |
syz, C |
error |
|
54 |
5d20h |
35d
|
26/29 |
never |
b61732f47316
nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()
|
|
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
prio:high
usb
|
17 |
syz, C |
|
|
19 |
81d |
85d
|
29/29 |
54d |
9dfd800b374c
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
|
|
general protection fault in dummy_timer (2)
prio:high
usb
|
19 |
syz, C |
|
|
97 |
54d |
685d
|
29/29 |
54d |
d5e5cd3654d2
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
|
|
KASAN: slab-use-after-free Write in iowarrior_write_callback (2)
actionable
prio:high
usb
|
22 |
|
|
|
1 |
156d |
144d
|
29/29 |
74d |
bc0e4f16c44e
USB: iowarrior: fix use-after-free on disconnect
|
|
WARNING: ODEBUG bug in i2c_device_remove (2)
prio:high
i2c
usb
|
-1 |
syz, C |
|
|
3 |
159d |
173d
|
29/29 |
87d |
680daf40a82d
media: rtl2832: fix use-after-free in rtl2832_remove()
|
|
KASAN: slab-out-of-bounds Read in usbtmc_interrupt
prio:high
usb
|
17 |
syz, C |
|
|
5 |
145d |
420d
|
29/29 |
87d |
52f2ad3f7e5e
usb: usbtmc: check URB actual_length for interrupt-IN notifications
|
|
INFO: task hung in lbs_remove_card
usb
libertas
prio:high
|
1 |
syz, C |
|
|
14933 |
144d |
422d
|
29/29 |
141d |
4a142520d166
wifi: libertas: notify firmware load wait on disconnect
|
|
BUG: sleeping function called from invalid context in usb_tx_block
usb
libertas
prio:high
|
5 |
syz, C |
|
|
780 |
173d |
228d
|
29/29 |
142d |
7c5c2b661bdb
wifi: libertas: don't kill URBs in interrupt context
|