|
KASAN: slab-use-after-free Read in hidraw_report_event
prio:high
input
usb
|
19 |
syz, C |
error |
|
4 |
139d |
140d
|
8/29 |
never |
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
HID: synchronize input before cleaning up a failed probe
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
|
|
WARNING in drm_plane_create_rotation_property
dri
usb
prio:high
|
-1 |
syz, C |
error |
|
12 |
5d06h |
24d
|
21/29 |
never |
cb732d027aa1
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
|
|
BUG: unable to handle kernel NULL pointer dereference in usb_stor_invoke_transport (2)
usb-storage
prio:high
|
10 |
syz, C |
error |
|
7 |
3d16h |
5d13h
|
1/29 |
never |
usb: storage: ene_ub6250: set transport_reset to avoid NULL deref
|
|
UBSAN: array-index-out-of-bounds in uea_bind
prio:high
usb
|
15 |
syz, C |
|
|
87 |
28d |
44d
|
26/29 |
never |
37a5e120118a
usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
|
|
WARNING in cxacru_cm/usb_submit_urb (3)
prio:high
usb
|
-1 |
syz, C |
|
|
86 |
31d |
44d
|
22/29 |
never |
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
|
|
KASAN: use-after-free Read in em28xx_init_extension (2)
prio:high
usb
media
|
19 |
syz, C |
done |
|
1464 |
28d |
1628d
|
26/29 |
never |
826915b6b65e
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
|
|
KASAN: use-after-free Read in em28xx_close_extension (2)
prio:high
usb
media
|
19 |
syz, C |
error |
|
34 |
1d04h |
724d
|
26/29 |
never |
95f76f51937f
media: em28xx: defer audio-only extension registration
|
|
KASAN: slab-out-of-bounds Read in drm_property_add_enum
prio:high
usb
dri
|
17 |
syz, C |
error |
|
111 |
7d02h |
26d
|
21/29 |
never |
da1ea35fea67
drm/gud: validate TV mode names before creating enum property
|
|
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
prio:high
usb
|
17 |
syz, C |
|
|
19 |
54d |
59d
|
29/29 |
27d |
9dfd800b374c
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
|
|
general protection fault in dummy_timer (2)
prio:high
usb
|
19 |
syz, C |
|
|
97 |
28d |
659d
|
29/29 |
27d |
d5e5cd3654d2
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
|
|
KASAN: slab-out-of-bounds Read in usbtmc_interrupt
prio:high
usb
|
17 |
syz, C |
|
|
5 |
119d |
394d
|
29/29 |
61d |
52f2ad3f7e5e
usb: usbtmc: check URB actual_length for interrupt-IN notifications
|
|
BUG: corrupted list in dev_deactivate_many (2)
prio:high
net
|
8 |
syz |
|
|
8 |
96d |
97d
|
29/29 |
61d |
8eed5519e496
net: watchdog: fix refcount tracking races
net: watchdog: fix refcount tracking races
|
|
KASAN: slab-use-after-free Write in rsi_91x_deinit
actionable
wireless
prio:high
|
22 |
|
|
|
1 |
152d |
147d
|
29/29 |
115d |
db57a1aa54ff
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
|
|
INFO: task hung in lbs_remove_card
usb
libertas
prio:high
|
1 |
syz, C |
|
|
14933 |
117d |
396d
|
29/29 |
115d |
4a142520d166
wifi: libertas: notify firmware load wait on disconnect
|
|
BUG: sleeping function called from invalid context in usb_tx_block
usb
libertas
prio:high
|
5 |
syz, C |
|
|
780 |
147d |
201d
|
29/29 |
116d |
7c5c2b661bdb
wifi: libertas: don't kill URBs in interrupt context
|