|
possible deadlock in xfs_dquot_disk_alloc (2)
prio:high
xfs
|
4 |
|
|
|
2 |
46d |
42d
|
24/29 |
never |
0241ea5fb0fe
xfs: restore nofs context unconditionally in xfs_trans_roll
|
|
kernel BUG in xfs_buf_free
prio:high
xfs
|
-1 |
|
|
|
24 |
21d |
40d
|
28/29 |
never |
d852729c5f4f
xfs: handle NULL b_addr in xfs_buf_free
|
|
memory leak in __vsock_create (2)
prio:high
net
virt
|
3 |
syz, C |
|
|
6 |
7d15h |
122d
|
23/29 |
never |
b8c899cf5e7b
vsock: don't check the listener's sk_err in vsock_accept()
|
|
WARNING in virtio_transport_send_pkt_info (2)
prio:high
kvm
net
virt
|
-1 |
syz, C |
error |
|
4 |
25d |
269d
|
2/29 |
never |
vsock/virtio: restore msg_iter on transmission failure
vsock/virtio: restore msg_iter on transmission failure
|
|
WARNING: lock held when returning to user space in lock_vma_under_rcu
prio:high
mm
|
4 |
|
|
|
1 |
163d |
159d
|
2/29 |
never |
userfaultfd: fix lock leak in mfill_get_vma()
|
|
WARNING in folio_add_new_anon_rmap
prio:high
mm
|
-1 |
syz, C |
error |
|
14 |
163d |
161d
|
2/29 |
never |
userfaultfd-introduce-struct-mfill_state-fix
|
|
UBSAN: array-index-out-of-bounds in uea_bind
usb
prio:high
|
15 |
syz, C |
|
|
87 |
7d09h |
23d
|
23/29 |
never |
37a5e120118a
usb: atm: ueagle-atm: fix array-index-out-of-bounds in uea_bind()
|
|
WARNING in cxacru_cm/usb_submit_urb (3)
usb
prio:high
|
-1 |
syz, C |
|
|
86 |
10d |
24d
|
1/29 |
never |
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
|
|
KASAN: slab-use-after-free Read in cxacru_poll_status
usb
prio:high
|
19 |
syz |
|
|
19 |
10d |
24d
|
23/29 |
never |
b5b02ce65777
usb: atm: cxacru: fix use-after-free in cxacru_poll_status
|
|
WARNING in udf_free_blocks (3)
prio:high
udf
|
-1 |
syz, C |
error |
|
5 |
61d |
65d
|
19/29 |
never |
31e5e0c8c8e2
udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks
|
|
KMSAN: uninit-value in sw842_compress (2)
prio:high
crypto
|
7 |
|
|
|
5 |
74d |
79d
|
18/29 |
never |
31fd8876a344
tmpfs: zero unused folio tail for long symlinks
|
|
KCSAN: data-race in ktime_get_real_seconds / timekeeping_update_from_shadow (4)
race:harmful
prio:high
kernel
|
6 |
|
|
|
4 |
55d |
98d
|
23/29 |
never |
d7fc133bf91f
timekeeping: Use READ_ONCE/WRITE_ONCE() for xtime_sec to prevent tearing
|
|
possible deadlock in ocfs2_init_acl
prio:high
ocfs2
|
4 |
syz, C |
inconclusive |
|
31785 |
1h32m |
732d
|
16/29 |
never |
bd7c05fb4a47
ocfs2: fix circular locking dependency in ocfs2_init_acl()
|
|
possible deadlock in ocfs2_acquire_dquot
prio:high
ocfs2
|
4 |
syz, C |
|
|
71841 |
251d |
693d
|
2/29 |
never |
ocfs2: fix circular locking dependency in ocfs2_acquire_dquot
|
|
kernel BUG in link_path_walk
prio:high
ocfs2
|
-1 |
syz, C |
error |
|
21798 |
now |
263d
|
16/29 |
never |
d48ace653220
ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
|
|
KASAN: slab-out-of-bounds Read in nvmet_install_queue
nvme
prio:high
|
17 |
|
|
|
3 |
20d |
17d
|
19/29 |
never |
f1a8846e0638
nvmet: fix max_qid race between configfs and controller allocation
|
|
WARNING in nvmet_fc_register_targetport
nvme
prio:high
|
-1 |
C |
|
|
2 |
11d |
12d
|
13/29 |
never |
nvmet-fc: fix invalid free in LS IOD error path
|
|
KMSAN: kernel-infoleak in filemap_read
prio:high
block
|
18 |
syz, C |
|
|
9090 |
69d |
954d
|
19/29 |
never |
2fa56613b25d
ntfs3: fix info-leak in ntfs_rename()
|
|
kernel BUG in nilfs_copy_dirty_pages
prio:high
nilfs
|
-1 |
|
|
|
2 |
42d |
134d
|
24/29 |
never |
66f4ad3ce158
nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
|
|
KMSAN: uninit-value in nci_dev_up (3)
prio:high
net
nfc
|
7 |
|
|
|
1 |
102d |
98d
|
2/29 |
never |
nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
|
|
WARNING in netfs_writepages (3)
prio:high
netfs
|
-1 |
syz, C |
|
|
12 |
28d |
48d
|
28/29 |
never |
1d78d56c43ef
netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
|
|
KMSAN: uninit-value in rtl8150_open (2)
prio:high
net
usb
|
7 |
|
|
|
5 |
84d |
152d
|
23/29 |
never |
8c9c5b9a6896
net: usb: rtl8150: handle link status read failures
|
|
memory leak in udp_tunnel_nic_netdevice_event
prio:high
net
|
3 |
syz, C |
|
|
6 |
31d |
31d
|
28/29 |
never |
080695e6f005
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()
|
|
KASAN: slab-out-of-bounds Read in copy_from_sockptr
prio:high
net
|
17 |
syz |
|
|
25 |
14d |
20d
|
28/29 |
never |
d0c80dbb9704
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
|
|
INFO: task hung in __bch2_fs_stop
prio:high
fs
|
1 |
syz, C |
done |
|
1589 |
324d |
800d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
WARNING in va_alloc
mm
prio:high
|
-1 |
|
|
|
7 |
22d |
23d
|
2/29 |
never |
mm/vmalloc: do not warn on -ENOMEM from va_alloc()
|
|
WARNING in folio_lruvec_lock
prio:high
cgroups
mm
|
-1 |
|
|
|
1 |
435d |
431d
|
2/29 |
never |
mm/vma: correctly invoke late KSM check after mmap hook
|
|
kernel BUG in swap_cgroup_record (2)
prio:high
cgroups
mm
|
-1 |
syz, C |
error |
|
227 |
223d |
227d
|
2/29 |
never |
mm/swap_cgroup: fix kernel BUG in swap_cgroup_record
|
|
KASAN: slab-use-after-free Read in do_sync_mmap_readahead
prio:high
mm
|
19 |
syz, C |
done |
|
3 |
428d |
432d
|
2/29 |
never |
mm-filemap-allow-arch-to-request-folio-size-for-exec-memory-fix
|
|
WARNING in set_mm_walk
prio:high
mm
|
-1 |
C |
|
|
2 |
12d |
13d
|
2/29 |
never |
memcg: make the v1 soft limit knob inert
|
|
KASAN: use-after-free Read in em28xx_init_extension (2)
prio:high
usb
media
|
19 |
syz, C |
done |
|
1464 |
7d11h |
1608d
|
23/29 |
never |
826915b6b65e
media: em28xx: fix use-after-free of dev_next->devlist on disconnect
|
|
KASAN: use-after-free Read in em28xx_close_extension (2)
prio:high
usb
media
|
19 |
syz, C |
error |
|
20 |
4d11h |
704d
|
23/29 |
never |
95f76f51937f
media: em28xx: defer audio-only extension registration
|
|
memory leak in vidtv_psi_registration_desc_init
prio:high
media
|
3 |
syz, C |
|
|
2 |
34d |
41d
|
23/29 |
never |
9fa26c971ca3
media: dvb-core: fix feed leak on failed DMX_ADD_PID
|
|
WARNING: ODEBUG bug in cec_transmit_msg_fh
prio:high
media
|
-1 |
|
|
|
11 |
4d23h |
67d
|
23/29 |
never |
0fbd5c232702
media: cec: disable delayed work before freeing an interrupted transmit
|
|
memory leak in l2tp_tunnel_create (2)
net
prio:high
|
3 |
syz, C |
|
|
1 |
18d |
17d
|
26/29 |
never |
9006c116dd11
l2tp: fix tunnel and session refcount leak on seq_file release
|
|
memory leak in inet_create (3)
net
prio:high
|
3 |
syz, C |
|
|
1 |
15d |
15d
|
26/29 |
never |
9006c116dd11
l2tp: fix tunnel and session refcount leak on seq_file release
|
|
KASAN: use-after-free Read in release_card_device
prio:high
sound
|
19 |
C |
|
|
65 |
4d13h |
19d
|
23/29 |
never |
5ae1a690c522
ALSA: core: Fix use-after-free in snd_card_do_free()
|
|
BUG: unable to handle kernel paging request in azx_probe_work
sound
prio:high
|
8 |
syz, C |
|
|
69 |
7d04h |
18d
|
23/29 |
never |
9895573b0185
ALSA: hda/intel: Add sanity check for BAR0 size
|
|
BUG: unable to handle kernel paging request in snd_hdac_bus_parse_capabilities
prio:high
sound
|
8 |
C |
|
|
8 |
12d |
13d
|
23/29 |
never |
9895573b0185
ALSA: hda/intel: Add sanity check for BAR0 size
|
|
possible deadlock in snd_rawmidi_kernel_open
prio:high
sound
|
4 |
|
|
|
15 |
5d01h |
25d
|
23/29 |
never |
9c04742e73b3
ALSA: rawmidi: Work around false-positive mutex lockdep warning
|
|
KASAN: slab-use-after-free Write in snd_usb_midi_v2_free
sound
prio:high
|
22 |
|
|
|
256 |
4d02h |
19d
|
26/29 |
never |
f8a80cfb6861
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs
|
|
INFO: task hung in bch2_copygc_stop
prio:high
kernel
|
1 |
syz, C |
done |
|
31386 |
316d |
815d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
KASAN: null-ptr-deref Read in l2cap_chan_hold_unless_zero
prio:high
bluetooth
|
11 |
syz, C |
|
|
9 |
5d19h |
34d
|
2/29 |
never |
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
|
|
KASAN: slab-use-after-free Read in l2cap_sock_ready_cb (2)
prio:high
bluetooth
|
19 |
syz |
error |
|
136 |
6d16h |
692d
|
2/29 |
never |
Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
|
|
KASAN: slab-use-after-free Read in l2cap_disconn_ind (3)
prio:high
bluetooth
|
19 |
|
|
|
2 |
28d |
103d
|
23/29 |
never |
2b66c83ff175
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
|
|
KASAN: use-after-free Read in jfs_lazycommit
prio:high
jfs
|
19 |
syz, C |
error |
|
4241 |
31m |
1423d
|
0/29 |
never |
From 7e1a0b91e9efa8bec40fc5397ba6c4e683d72df0 Mon Sep 17 00:00:00 2001
|
|
KMSAN: uninit-value in steam_register
prio:high
input
usb
|
7 |
|
|
|
3 |
78d |
76d
|
23/29 |
never |
33ff7b49c38b
HID: steam: Reject short reads
|
|
WARNING in hv_tlb_flush_enqueue
prio:high
kvm-x86
|
-1 |
syz, C |
|
|
2 |
63d |
63d
|
2/29 |
never |
KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses
|
|
WARNING in vcpu_run (2)
prio:high
kvm-x86
|
-1 |
syz, C |
error |
|
5 |
35d |
65d
|
2/29 |
never |
KVM: x86: Don't WARN if IRQ disappears because it was cleared from the PIC
|
|
INFO: rcu detected stall in kvm_vcpu_ioctl (4)
prio:high
kvm-x86
kvm
|
1 |
syz, C |
error |
|
8 |
17d |
240d
|
2/29 |
never |
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
|
|
INFO: task hung in __writeback_inodes_sb_nr (6)
prio:high
jfs
|
1 |
syz, C |
done |
|
4177 |
6d21h |
1164d
|
1/29 |
never |
PM: hibernate: Fix block device handling in test_resume mode
|
|
UBSAN: shift-out-of-bounds in squashfs_xz_comp_opts
prio:high
squashfs
|
-1 |
syz, C |
error |
|
4 |
149d |
187d
|
2/29 |
never |
Squashfs: check xz dictionary size isn't zero
|
|
INFO: task hung in __closure_sync
prio:high
fs
|
1 |
syz, C |
done |
|
8591 |
315d |
843d
|
2/29 |
never |
bcachefs: Increase BCH_MIN_NR_NBUCKETS
|
|
possible deadlock in digi_set_modem_signals
usb
prio:high
|
4 |
syz, C |
error |
|
13 |
1d10h |
24d
|
3/29 |
never |
USB: serial: digi_acceleport: add port lock nesting annotation
|
|
KMSAN: uninit-value in bch2_alloc_sectors_start_trans (2)
prio:high
fs
|
7 |
syz |
|
|
875 |
329d |
495d
|
2/29 |
never |
bcachefs: Add missing ei_last_dirtied update
|
|
WARNING in bch2_fs_journal_start
prio:high
fs
|
-1 |
syz, C |
done |
|
14 |
429d |
449d
|
2/29 |
never |
bcachefs: Don't allow mounting with crazy numbers of dirty journal entries
|
|
WARNING in closure_put_after_sub
prio:high
fs
|
-1 |
|
|
|
2 |
379d |
403d
|
2/29 |
never |
bcachefs: Ensure we don't return with closure on waitlist
|
|
KASAN: slab-use-after-free Write in bch2_get_next_dev
prio:high
fs
|
22 |
syz, C |
|
|
1331 |
308d |
402d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
KASAN: slab-use-after-free Write in bch2_do_discards
prio:high
fs
|
22 |
syz |
|
|
137 |
328d |
398d
|
2/29 |
never |
bcachefs: Fix UAF by journal write path
|
|
KASAN: slab-out-of-bounds Read in __bch2_alloc_to_v4
prio:high
fs
|
17 |
|
|
|
20 |
415d |
413d
|
2/29 |
never |
bcachefs: Fix __bch2_alloc_to_v4 copy
|
|
kernel BUG in __journal_res_get (3)
prio:high
fs
|
-1 |
syz, C |
inconclusive |
|
175 |
308d |
432d
|
2/29 |
never |
bcachefs: Fix __bch2_fs_read_write() error path
|
|
kernel panic: in transaction restart: transaction_restart_relock, last restarted by
prio:high
fs
|
2 |
|
|
|
5 |
389d |
389d
|
2/29 |
never |
bcachefs: Fix incorrect transaction handling
|
|
KMSAN: uninit-value in bch2_check_subvols
prio:high
fs
|
7 |
syz, C |
|
|
53 |
329d |
418d
|
2/29 |
never |
bcachefs: Fix missing compat code in check_subvol()
|
|
KASAN: slab-out-of-bounds Write in bch2_dirent_init_name
prio:high
fs
|
21 |
syz, C |
error |
|
1496 |
308d |
433d
|
2/29 |
never |
bcachefs: Fix padding zeroout when creating casefolded dirents
|
|
INFO: task hung in invalidate_inode_pages2_range (3)
prio:high
fs
|
1 |
syz, C |
done |
|
57 |
76d |
542d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bch2_readahead
prio:high
fs
|
1 |
syz, C |
done |
|
375 |
345d |
826d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bch2_page_fault
prio:high
ntfs3
ext4
exfat
|
1 |
syz |
done |
|
42 |
369d |
618d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in bchfs_fpunch (2)
prio:high
fs
mm
|
1 |
syz, C |
done |
|
2 |
381d |
425d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
INFO: task hung in pipe_release (6)
prio:high
kernfs
|
1 |
syz |
done |
|
20 |
78d |
542d
|
2/29 |
never |
bcachefs: Fix readahead involved deadlock
|
|
KMSAN: uninit-value in __bch2_alloc_v4_to_text
prio:high
fs
|
7 |
syz, C |
|
|
3 |
428d |
433d
|
2/29 |
never |
bcachefs: Fix refs to undefined fields in __bch2_alloc_v4_to_text()
|
|
kernel BUG in bch2_fill_extent (2)
prio:high
fs
|
-1 |
|
|
|
10 |
323d |
405d
|
2/29 |
never |
bcachefs: Fix unhandled key type in fiemap_fill_extent
|
|
UBSAN: array-index-out-of-bounds in bch2_accounting_validate
prio:high
fs
|
15 |
syz, C |
done |
|
23 |
317d |
385d
|
2/29 |
never |
bcachefs: Ignore accounting key type larger than BCH_DISK_ACCOUNTING_TYPE_NR
|
|
memory leak in uss720_probe
prio:high
usb
|
3 |
syz, C |
|
|
3 |
13d |
39d
|
3/29 |
never |
USB: misc: uss720: Fix leak in get_1284_register
|
|
KASAN: slab-out-of-bounds Read in l2cap_sock_setsockopt (2)
prio:high
bluetooth
|
19 |
|
|
|
2 |
25d |
31d
|
2/29 |
never |
Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
|
|
kernel BUG in bch2_btree_repair_topology_recurse
prio:high
fs
|
-1 |
syz, C |
done |
|
7 |
329d |
389d
|
2/29 |
never |
bcachefs: btree_check_root_boundaries()
|
|
kernel BUG in bch2_printbuf_exit
prio:high
fs
|
-1 |
syz, C |
error |
|
29 |
399d |
402d
|
2/29 |
never |
bcachefs: convert str_hash.c to CLASS
|
|
WARNING in bch2_verify_accounting_clean
prio:high
fs
|
-1 |
|
|
|
29 |
312d |
561d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
KASAN: use-after-free Read in check_extent_overbig
prio:high
fs
|
19 |
syz, C |
done |
done |
18 |
344d |
627d
|
2/29 |
never |
bcachefs: fix check_extent_overbig() call
|
|
WARNING in bch2_prt_printf
prio:high
fs
|
-1 |
syz, C |
done |
error |
103 |
331d |
835d
|
2/29 |
never |
bcachefs: journal_entry_btree_keys_to_text() is more careful
|
|
kernel BUG in btrfs_alloc_ordered_extent
prio:high
btrfs
|
-1 |
syz, C |
error |
|
280 |
10d |
63d
|
19/29 |
never |
ec78575dde99
btrfs: always wait for ordered extents to avoid OE races
|
|
KASAN: slab-use-after-free Read in close_fs_devices
prio:high
btrfs
|
19 |
|
|
|
22 |
420d |
424d
|
2/29 |
never |
btrfs: fix a use-after-free race if btrfs_open_devices() failed
|
|
WARNING in update_curr_idle
prio:high
kernel
|
-1 |
|
|
|
188 |
61d |
73d
|
0/29 |
never |
c095741713d1 sched/fair: Fix newidle vs core-sched
|
|
WARNING in drm_plane_create_rotation_property
dri
usb
prio:high
|
-1 |
syz, C |
error |
|
8 |
1d15h |
4d04h
|
2/29 |
never |
drm/gud: validate GUD_ROTATION_0 is present in supported rotations
|
|
WARNING in virtio_gpu_free_vbufs
virt
dri
prio:high
|
-1 |
|
|
|
2 |
22d |
22d
|
2/29 |
never |
drm/virtio: reclaim pending vbufs before tearing down vqs
|
|
possible deadlock in ext4_evict_inode (5)
prio:high
ext4
|
4 |
syz, C |
error |
|
589 |
5d11h |
292d
|
19/29 |
never |
a897682793eb
ext4: fix circular lock dependency in ext4_ext_migrate
|
|
possible deadlock in wait_transaction_locked (3)
prio:high
ext4
|
4 |
syz, C |
error |
|
909 |
1h11m |
237d
|
19/29 |
never |
7461c60b9c6a
ext4: skip extra isize expansion during mount to prevent deadlock
|
|
INFO: task hung in do_rmdir (7)
prio:high
kernfs
|
1 |
syz, C |
error |
error |
3 |
222d |
233d
|
19/29 |
never |
54b6bd40898d
ext4: stop retrying saturated xattr cache entries
|
|
KASAN: slab-use-after-free Read in __ext4_check_dir_entry
prio:high
ext4
|
19 |
syz, C |
error |
error |
7 |
17d |
420d
|
19/29 |
never |
bc4b7b0414c3
ext4: validate readdir offset before accessing dirent
|
|
INFO: trying to register non-static key in f2fs_exist_written_data
prio:high
f2fs
|
-1 |
syz, C |
error |
|
152 |
98d |
107d
|
2/29 |
never |
f2fs: initialize ino_entry_info before checkpoint load
|
|
KASAN: slab-out-of-bounds Read in fbcon_prepare_logo
prio:high
fbdev
|
19 |
syz, C |
|
|
1741 |
7h03m |
545d
|
2/29 |
never |
fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo
|
|
general protection fault in ar_context_release
linux1394
prio:high
|
2 |
syz, C |
|
|
8 |
19d |
18d
|
26/29 |
never |
42d217add8d8
firewire: ohci: fix NULL pointer dereference in ar_context_release
|
|
KASAN: null-ptr-deref Read in io_sqe_buffer_register
prio:high
io-uring
|
11 |
syz, C |
done |
|
54 |
350d |
354d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
KASAN: wild-memory-access Read in md5_update
prio:high
crypto
|
17 |
syz, C |
done |
|
8 |
351d |
352d
|
2/29 |
never |
fixup: mm/gup: remove record_subpages()
|
|
KASAN: slab-use-after-free Read in fuse_dev_do_write
fuse
prio:high
actionable
|
19 |
|
|
|
1 |
19d |
12d
|
2/29 |
never |
fuse: wait for FR_FINISHED on abort_on_kill to prevent use-after-free
|
|
kernel BUG in hfs_write_inode
prio:high
hfs
|
-1 |
syz, C |
error |
|
243695 |
5d21h |
1368d
|
24/29 |
never |
53c3c138d672
hfs: validate catalog CNIDs before instantiating inodes
|
|
KASAN: slab-use-after-free Read in hidraw_report_event
prio:high
input
usb
|
19 |
syz, C |
error |
|
4 |
118d |
119d
|
1/29 |
never |
hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop
|
|
memory leak in io_submit_sqes (6)
io-uring
block
prio:high
|
3 |
syz, C |
|
|
2 |
15d |
14d
|
19/29 |
never |
360941242f09
io_uring/uring_cmd: don't skip completion for a synchronous multishot cmd
|
|
KASAN: slab-use-after-free Read in ip6gre_tunnel_xmit
prio:high
net
|
19 |
syz, C |
error |
error |
33 |
234d |
642d
|
0/29 |
never |
ip6_gre: use skb_vlan_inet_prepare() instead of pskb_inet_may_pull()
|
|
KASAN: slab-use-after-free Read in ipvlan_hard_header (5)
net
prio:high
|
19 |
|
|
|
1 |
25d |
20d
|
26/29 |
never |
e16e960d55a4
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
|
|
KASAN: slab-use-after-free Read in netdev_register_kobject (2)
prio:high
actionable
kernel
|
19 |
|
|
|
3 |
79d |
84d
|
29/29 |
6d17h |
bb067a99a035
Bluetooth: bnep: pin L2CAP connection during netdev registration
|
|
KASAN: slab-use-after-free Write in bt_accept_dequeue
prio:high
actionable
bluetooth
|
22 |
|
|
|
3 |
66d |
65d
|
29/29 |
6d17h |
4bd0b274054f
Bluetooth: fix UAF in bt_accept_dequeue()
|
|
KASAN: slab-out-of-bounds Read in usbatm_usb_disconnect
prio:high
usb
|
17 |
syz, C |
|
|
19 |
33d |
38d
|
29/29 |
7d02h |
9dfd800b374c
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect
|
|
general protection fault in dummy_timer (2)
prio:high
usb
|
19 |
syz, C |
|
|
97 |
7d09h |
638d
|
29/29 |
7d02h |
d5e5cd3654d2
usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback
|
|
WARNING in btrfs_force_cow_block
prio:high
btrfs
|
-1 |
|
|
|
4 |
66d |
64d
|
29/29 |
15d |
ae4316f332e0
btrfs: do not try compression for data reloc inodes
|
|
KASAN: slab-use-after-free Write in btrfs_put_root
prio:high
actionable
btrfs
|
22 |
|
|
|
4 |
72d |
83d
|
29/29 |
15d |
83201804efa4
btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
|
|
KASAN: stack-out-of-bounds Read in xfrm_state_find (6)
prio:high
net
|
17 |
|
|
|
2 |
60d |
60d
|
29/29 |
15d |
ea528f18231e
xfrm: reject optional IPTFS templates in outbound policies
|
|
kernel BUG in gfs2_jindex_free (2)
prio:high
gfs2
|
-1 |
syz, C |
error |
error |
1398 |
131d |
437d
|
29/29 |
20d |
bb47cce7a1ee
gfs2: gfs2_log_flush withdraw fixes
|
|
WARNING in kernfs_new_node (3)
prio:high
kernfs
|
-1 |
syz |
error |
error |
54 |
70d |
734d
|
29/29 |
26d |
e2674dfbed8a
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
|
|
KASAN: slab-use-after-free Read in kernfs_root
prio:high
kernfs
|
19 |
|
|
|
37 |
51d |
447d
|
29/29 |
26d |
e2674dfbed8a
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
|
|
general protection fault in ieee802154_release_queue
prio:high
wpan
|
2 |
|
|
|
1 |
60d |
56d
|
29/29 |
26d |
539dfcf69105
mac802154: remove interfaces with RCU list deletion
|
|
KASAN: slab-use-after-free Read in netfs_unbuffered_write
prio:high
netfs
|
19 |
syz, C |
|
|
8 |
55d |
86d
|
29/29 |
26d |
64f04f978923
netfs: Fix DIO write retry for filesystems without a ->prepare_write()
|
|
KASAN: slab-use-after-free Write in iowarrior_write_callback (2)
actionable
prio:high
usb
|
22 |
|
|
|
1 |
108d |
96d
|
29/29 |
26d |
bc0e4f16c44e
USB: iowarrior: fix use-after-free on disconnect
|
|
WARNING in ublk_ch_batch_io_uring_cmd
prio:high
block
|
-1 |
|
|
|
1 |
60d |
55d
|
29/29 |
26d |
f01f5275feb7
ublk: snapshot batch commands before preparing I/O
|
|
KMSAN: uninit-value in xlog_verify_head
prio:high
xfs
|
7 |
|
|
|
1 |
147d |
143d
|
29/29 |
26d |
cc9af5e461ea
xfs: use null daddr for unset first bad log block
|
|
possible deadlock in ext4_xattr_inode_lookup_create
prio:high
ext4
|
4 |
syz, C |
done |
error |
287 |
95d |
695d
|
29/29 |
34d |
7f473f971382
ext4: lockdep: handle i_data_sem subclassing for special inodes
|
|
KMSAN: kernel-infoleak in irqentry_exit (2)
kernel
prio:high
|
9 |
|
|
|
11110 |
35d |
36d
|
29/29 |
35d |
6d99479799c6
rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
|
|
KMSAN: uninit-value in hfsplus_bnode_find
prio:high
hfs
|
7 |
syz, C |
|
|
24 |
68d |
131d
|
29/29 |
40d |
d67aadee19ff
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
3f95e2661574
hfsplus: Add a sanity check for btree node size
|
|
WARNING in dma_resv_add_fence
prio:high
media
dri
|
-1 |
syz, C |
|
|
7 |
104d |
108d
|
29/29 |
40d |
9af1b6e175c8
drm/virtio: use uninterruptible resv lock for plane updates
drm/virtio: use uninterruptible resv lock for plane updates
|
|
WARNING in __ethtool_get_link_ksettings
net
prio:high
|
-1 |
|
|
|
5 |
63d |
64d
|
29/29 |
40d |
cd1c188db109
vlan: defer real device state propagation to netdev_work
|
|
INFO: task hung in netdev_rx_mode_work
prio:high
net
|
1 |
|
|
|
44 |
60d |
63d
|
29/29 |
40d |
cd1c188db109
vlan: defer real device state propagation to netdev_work
|
|
possible deadlock in rhashtable_free_and_destroy
prio:high
mm
|
4 |
|
|
|
8 |
104d |
125d
|
29/29 |
40d |
060d4e94b8d4
rhashtable: give each instance its own lockdep class
|
|
UBSAN: array-index-out-of-bounds in ocfs2_dx_dir_lookup_rec
prio:high
ocfs2
|
15 |
|
|
|
1 |
98d |
94d
|
29/29 |
40d |
6371a07148ee
ocfs2: fix buffer head management in ocfs2_read_blocks()
|
|
KASAN: slab-use-after-free Read in z_erofs_decompress_kickoff
prio:high
erofs
|
19 |
|
|
|
2 |
90d |
113d
|
29/29 |
40d |
1aee05e814d2
erofs: fix use-after-free on sbi->sync_decompress
|
|
general protection fault in jbd2_journal_dirty_metadata (2)
prio:high
ext4
|
2 |
syz, C |
error |
|
28 |
70d |
111d
|
29/29 |
40d |
8fc197cf366b
jbd2: check for aborted handle in jbd2_journal_dirty_metadata()
|
|
INFO: task hung in btrfs_invalidate_folio (4)
prio:high
btrfs
|
1 |
syz, C |
error |
|
7 |
90d |
90d
|
29/29 |
40d |
532085d00eb5
btrfs: fix deadlock cloning inline extent when using flushoncommit
|
|
kernel BUG in __get_vm_area_node
prio:high
bridge
|
-1 |
|
|
|
2 |
110d |
106d
|
29/29 |
40d |
04aa71da5f35
mm/vmalloc: do not trigger BUG() on BH disabled context
|
|
general protection fault in __hfsplus_setxattr
prio:high
hfs
|
2 |
syz, C |
error |
|
153 |
79d |
131d
|
29/29 |
40d |
7a41fd2b32e5
hfsplus: Remove the duplicate attr inode dirty marking action
|
|
KASAN: slab-out-of-bounds Read in hfsplus_bnode_read
prio:high
hfs
|
21 |
syz, C |
error |
error |
521 |
391d |
1367d
|
29/29 |
40d |
966cb76fb285
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
|
|
KMSAN: uninit-value in mptcp_established_options
prio:high
mptcp
|
7 |
syz |
|
|
3191 |
80d |
115d
|
29/29 |
40d |
5e939544f9d2
mptcp: fix uninit-value in mptcp_established_options
|
|
general protection fault in ovl_iterate
prio:high
overlayfs
|
8 |
syz, C |
|
|
20 |
78d |
244d
|
29/29 |
40d |
1711b6ed6953
ovl: keep err zero after successful ovl_cache_get()
|
|
general protection fault in arp_create (4)
prio:high
net
|
2 |
|
|
|
2 |
100d |
99d
|
29/29 |
40d |
f80d3d98d2ff
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
|
|
WARNING: suspicious RCU usage in kernfs_put
prio:high
kernfs
|
4 |
|
|
|
1 |
139d |
135d
|
29/29 |
40d |
0fdde3f2aead
kernfs: fix suspicious RCU usage in kernfs_put()
|
|
KASAN: slab-use-after-free Read in shrink_dcache_tree
prio:high
actionable
fs
|
19 |
|
|
|
2 |
66d |
68d
|
29/29 |
40d |
89038cc87d80
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
|
|
WARNING in page_counter_uncharge (2)
prio:high
cgroups
mm
|
-1 |
syz, C |
error |
|
10 |
69d |
149d
|
29/29 |
40d |
15807d0ddde3
mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch
|
|
possible deadlock in __ethtool_get_link_ksettings
prio:high
net
|
4 |
|
|
|
154 |
59d |
70d
|
29/29 |
40d |
cd1c188db109
vlan: defer real device state propagation to netdev_work
|
|
general protection fault in vidtv_psi_ts_psi_write_into
prio:high
media
|
8 |
|
|
|
79 |
58d |
224d
|
29/29 |
40d |
7d8bf3d8f910
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
|
|
general protection fault in ocfs2_assure_trans_credits (2)
prio:high
ocfs2
|
2 |
|
|
|
12 |
73d |
83d
|
29/29 |
40d |
f9ab30c96b0f
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
|
|
WARNING in ip_rt_bug (3)
prio:high
net
|
-1 |
syz, C |
error |
|
54 |
86d |
96d
|
29/29 |
40d |
7eb72c1e3984
ipv4: icmp: reject broadcast/multicast routes
|
|
KASAN: slab-use-after-free Read in dma_buf_fd
actionable
prio:high
dri
media
|
19 |
|
|
|
21 |
98d |
166d
|
29/29 |
40d |
ead6680f354f
dma-buf: fix UAF in dma_buf_fd() tracepoint
|
|
KASAN: slab-use-after-free Read in current_time
prio:high
kernfs
|
19 |
syz, C |
|
|
2 |
87d |
84d
|
29/29 |
40d |
b93c55b4932d
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
|
|
KMSAN: uninit-value in _find_next_bit
prio:high
ocfs2
|
7 |
syz, C |
|
|
30 |
132d |
520d
|
29/29 |
40d |
93c8c6ea90be
ocfs2: use kzalloc for quota recovery bitmap allocation
|
|
WARNING: ODEBUG bug in i2c_device_remove (2)
prio:high
i2c
usb
|
-1 |
syz, C |
|
|
3 |
111d |
125d
|
29/29 |
40d |
680daf40a82d
media: rtl2832: fix use-after-free in rtl2832_remove()
|
|
KASAN: slab-use-after-free Read in fb_mode_is_equal
actionable
prio:high
fbdev
|
19 |
|
|
|
3 |
80d |
75d
|
29/29 |
40d |
2c1c805c65fb
fbdev: fix use-after-free in store_modes()
|
|
WARNING in __ocfs2_decrease_refcount
prio:high
ocfs2
|
-1 |
|
|
|
12 |
69d |
98d
|
29/29 |
40d |
1ec3cca2d8b6
ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent
|
|
KASAN: slab-use-after-free Write in gfs2_qd_dealloc (3)
prio:high
gfs2
|
22 |
syz, C |
error |
|
146 |
195d |
453d
|
29/29 |
40d |
f9c9ec2c319f
gfs2: fix use-after-free in gfs2_qd_dealloc
|
|
KASAN: slab-use-after-free Read in ipvlan_hard_header (4)
prio:high
actionable
net
|
19 |
|
|
|
2 |
112d |
73d
|
29/29 |
40d |
f4c3d89fc986
tipc: fix UAF in tipc_l2_send_msg()
|
|
possible deadlock in __sk_receive_skb
prio:high
net
|
4 |
syz, C |
error |
|
80 |
94d |
96d
|
29/29 |
40d |
dbc81608e3a6
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
kernel BUG in f2fs_do_truncate_blocks (2)
prio:high
f2fs
|
-1 |
|
|
|
1 |
114d |
110d
|
29/29 |
40d |
8712353ed80f
f2fs: fix to do sanity check on f2fs_get_node_folio_ra()
|
|
KASAN: slab-out-of-bounds Read in cache_seq_start_rcu
prio:high
net
nfs
|
17 |
syz, C |
|
|
67 |
89d |
125d
|
29/29 |
40d |
ea25e3c7915b
sunrpc: prevent out-of-bounds read in __cache_seq_start()
|
|
KASAN: slab-use-after-free Read in sit_tunnel_xmit
prio:high
net
|
19 |
|
|
|
1 |
79d |
78d
|
29/29 |
40d |
f0e42f0c4337
ipv6: sit: reload inner IPv6 header after GSO offloads
|
|
memory leak in path_openat (3)
prio:high
io-uring
|
3 |
syz, C |
|
|
1 |
72d |
72d
|
29/29 |
40d |
2564ca2e31bd
io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE
|
|
possible deadlock in ocfs2_evict_inode
prio:high
ocfs2
|
4 |
syz, C |
error |
|
2694 |
69d |
735d
|
29/29 |
40d |
ff6f26c58421
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
|
|
KMSAN: uninit-value in ni_seek_data_or_hole
prio:high
ntfs3
|
7 |
syz, C |
|
|
6 |
93d |
90d
|
29/29 |
40d |
57ac2831c8e0
fs/ntfs3: prevent potential lcn remains uninitialized
|
|
KMSAN: uninit-value in __fl_lookup (3)
prio:high
net
|
7 |
|
|
|
7 |
67d |
87d
|
29/29 |
40d |
bf6e8af2c8be
flow_dissector: check device type before reading ETH_ADDRS
|
|
KASAN: slab-use-after-free Read in fib_rules_lookup
net
prio:high
|
19 |
|
|
|
37 |
67d |
69d
|
29/29 |
40d |
d954a67a7dfa
ipv4: fib_rule: Move fib4_rules_exit() to ->exit().
46762cefe7f4
net: serialize netif_running() check in enqueue_to_backlog()
|
|
UBSAN: shift-out-of-bounds in xfrm_selector_match (3)
prio:high
net
|
-1 |
|
|
|
1 |
71d |
70d
|
29/29 |
40d |
40f0b1047918
xfrm: validate selector family and prefixlen during match
|
|
general protection fault in remove_waiter
prio:high
kernel
|
2 |
syz |
|
|
6 |
106d |
117d
|
29/29 |
40d |
40a25d59e85b
locking/rtmutex: Skip remove_waiter() when waiter is not enqueued
|
|
KASAN: slab-use-after-free Write in __ipv6_dev_ac_dec
prio:high
net
|
22 |
|
|
|
1 |
109d |
109d
|
29/29 |
40d |
f723ccaff2fb
ipv6: anycast: insert aca into global hash under idev->lock
|
|
WARNING in rcuref_put_slowpath
net
prio:high
|
-1 |
|
|
|
1 |
67d |
63d
|
29/29 |
40d |
7116764ca53f
tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
|
|
KMSAN: kernel-infoleak in move_addr_to_user (7)
prio:high
hams
wpan
|
9 |
syz, C |
|
|
46 |
113d |
701d
|
29/29 |
40d |
4db86f8ab11b
ieee802154: fix kernel-infoleak in dgram_recvmsg()
|
|
kernel BUG in replace_file_extents
prio:high
btrfs
|
-1 |
|
|
|
54 |
78d |
128d
|
29/29 |
40d |
a6908f88c9da
btrfs: validate data reloc tree file extent item members
|
|
inconsistent lock state in __sk_receive_skb
prio:high
net
|
4 |
syz, C |
error |
|
147 |
82d |
171d
|
29/29 |
40d |
dbc81608e3a6
phonet/pep: disable BH around forwarded sk_receive_skb()
|
|
KASAN: slab-out-of-bounds Read in usbtmc_interrupt
prio:high
usb
|
17 |
syz, C |
|
|
5 |
98d |
373d
|
29/29 |
40d |
52f2ad3f7e5e
usb: usbtmc: check URB actual_length for interrupt-IN notifications
|
|
KASAN: wild-memory-access Read in lookup_swap_cgroup_id (2)
prio:high
cgroups
mm
|
17 |
|
|
|
4 |
136d |
199d
|
29/29 |
40d |
63b02a9409cb
mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host
|
|
KASAN: slab-use-after-free Read in ipv6_chk_acast_addr
prio:high
net
|
19 |
|
|
|
1 |
95d |
87d
|
29/29 |
40d |
f723ccaff2fb
ipv6: anycast: insert aca into global hash under idev->lock
|
|
possible deadlock in lock_two_nondirectories (2)
prio:high
ext4
overlayfs
|
4 |
syz, C |
error |
|
17 |
58d |
80d
|
29/29 |
40d |
c143957520c6
ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
|
|
KASAN: slab-use-after-free Read in replace_file_extents
actionable
prio:high
btrfs
|
19 |
|
|
|
1 |
97d |
83d
|
29/29 |
40d |
ae2eb64bfd97
btrfs: fix use-after-free after relocation failure with concurrent COW
|
|
BUG: sleeping function called from invalid context in lockref_get_not_dead
prio:high
gfs2
|
5 |
syz, C |
error |
|
13 |
112d |
131d
|
29/29 |
40d |
b99a1f0f18ee
gfs2: fix quota init duplicate scan
|
|
UBSAN: array-index-out-of-bounds in ocfs2_grow_tree (2)
prio:high
ocfs2
|
15 |
|
|
|
1 |
127d |
123d
|
29/29 |
40d |
452a8467be81
ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec
|
|
KMSAN: kernel-infoleak in irqentry_exit
prio:high
kernel
|
9 |
|
|
|
61732 |
40d |
85d
|
29/29 |
40d |
6d99479799c6
rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
|
|
BUG: corrupted list in dev_deactivate_many (2)
prio:high
net
|
8 |
syz |
|
|
8 |
75d |
77d
|
29/29 |
40d |
8eed5519e496
net: watchdog: fix refcount tracking races
net: watchdog: fix refcount tracking races
|
|
WARNING: ODEBUG bug in smpboot_thread_fn
prio:high
kernel
|
-1 |
|
|
|
5 |
112d |
112d
|
29/29 |
40d |
4df78ff02629
bridge: mcast: Fix a possible use-after-free when removing a bridge port
|
|
WARNING: refcount bug in __inet_csk_reqsk_queue_drop
prio:high
net
|
13 |
|
|
|
9 |
88d |
86d
|
29/29 |
40d |
e10902df2448
tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().
|
|
WARNING in stub_timer (2)
prio:high
kernel
|
-1 |
|
|
|
1 |
74d |
70d
|
29/29 |
40d |
b81dde13cc16
debugobjects: Plug race against a concurrent OOM disable
|
|
KASAN: slab-use-after-free Read in reverse_path_check_proc
prio:high
fs
|
19 |
syz, C |
|
|
113 |
77d |
93d
|
29/29 |
40d |
a1e9718b406b
eventpoll: restore EP_UNACTIVE_PTR sentinel for ctx->tfile_check_list
|
|
possible deadlock in keyring_clear (3)
prio:high
keyrings
lsm
|
4 |
syz, C |
|
|
81 |
58d |
321d
|
29/29 |
40d |
696c030e1e34
fscrypt: Replace mk_users keyring with simple list
|
|
WARNING in drm_prime_destroy_file_private (3)
dri
prio:high
|
-1 |
syz, C |
error |
|
183 |
100d |
103d
|
29/29 |
84d |
dc366607c41c
drm: Replace old pointer to new idr
|
|
BUG: sleeping function called from invalid context in ip_vs_conn_new
lvs
prio:high
|
5 |
syz, C |
|
|
2034 |
109d |
133d
|
29/29 |
84d |
d493d9de1c21
ipvs: fix the spin_lock usage for RT build
|
|
WARNING: bad unlock balance in do_wp_page
mm
prio:high
|
4 |
|
|
|
8 |
105d |
120d
|
29/29 |
88d |
mm: memcontrol: fix rcu unbalance in get_non_dying_memcg_end()
|
|
KCSAN: data-race in bond_3ad_get_active_agg_info / bond_3ad_state_machine_handler (3)
net
prio:high
|
6 |
|
|
|
1 |
118d |
118d
|
29/29 |
94d |
c4f050ce06c5
bonding: 3ad: implement proper RCU rules for port->aggregator
|
|
KASAN: slab-use-after-free Write in rsi_91x_deinit
actionable
wireless
prio:high
|
22 |
|
|
|
1 |
132d |
126d
|
29/29 |
94d |
db57a1aa54ff
wifi: rsi: fix kthread lifetime race between self-exit and external-stop
|
|
WARNING in vma_mark_detached
prio:high
mm
|
-1 |
syz, C |
error |
|
8 |
103d |
125d
|
29/29 |
94d |
619eab23e1ce
mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap()
|
|
INFO: task hung in lbs_remove_card
usb
libertas
prio:high
|
1 |
syz, C |
|
|
14933 |
96d |
375d
|
29/29 |
94d |
4a142520d166
wifi: libertas: notify firmware load wait on disconnect
|
|
general protection fault in task_work_cancel
lsm
prio:high
|
2 |
syz |
error |
|
15 |
151d |
170d
|
29/29 |
94d |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
general protection fault in task_work_cancel_match
prio:high
kernel
|
2 |
|
|
|
10 |
156d |
185d
|
29/29 |
94d |
929553bbb4cd
landlock: Fully release unused TSYNC work entries
|
|
BUG: stack guard page was hit in addrconf_rs_timer
prio:high
net
|
-1 |
|
|
|
1 |
163d |
163d
|
29/29 |
95d |
b7405dcf7385
bonding: prevent potential infinite loop in bond_header_parse()
|
|
KMSAN: uninit-value in fuse_dentry_revalidate (2)
fuse
prio:high
|
7 |
syz, C |
|
|
261 |
131d |
190d
|
29/29 |
95d |
5a6baf204610
fuse: fix uninit-value in fuse_dentry_revalidate()
|
|
WARNING in attr_data_get_block_locked
prio:high
ntfs3
|
-1 |
syz, C |
|
|
12 |
110d |
182d
|
29/29 |
95d |
d7ea8495fd30
fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()
|
|
WARNING in filename_mkdirat
gfs2
prio:high
|
-1 |
syz, C |
|
|
84 |
105d |
188d
|
29/29 |
95d |
2ff7cf7e0640
gfs2: Call unlock_new_inode before d_instantiate
|
|
KASAN: use-after-free Write in ocfs2_write_end_nolock
actionable
ocfs2
prio:high
|
22 |
|
|
|
26 |
106d |
144d
|
29/29 |
95d |
7bc5da4842be
ocfs2: fix out-of-bounds write in ocfs2_write_end_inline
|
|
KASAN: stack-out-of-bounds Read in l2cap_send_cmd
bluetooth
prio:high
|
17 |
syz, C |
|
|
174 |
151d |
163d
|
29/29 |
95d |
9d87cb22195b
Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req
|
|
inconsistent lock state in igrab
xfs
prio:high
|
4 |
syz, C |
error |
|
521 |
111d |
191d
|
29/29 |
95d |
f621324dfb3d
iomap: fix lockdep complaint when reads fail
|
|
BUG: sleeping function called from invalid context in usb_tx_block
usb
libertas
prio:high
|
5 |
syz, C |
|
|
780 |
126d |
180d
|
29/29 |
95d |
7c5c2b661bdb
wifi: libertas: don't kill URBs in interrupt context
|
|
memory leak in run_add_entry (2)
prio:high
ntfs3
|
3 |
syz, C |
|
|
1 |
142d |
156d
|
29/29 |
95d |
87ac077d6ea8
ntfs3: fix memory leak in indx_create_allocate()
|
|
KMSAN: uninit-value in ntfs_iomap_begin
ntfs3
prio:high
|
7 |
syz, C |
|
|
191 |
132d |
183d
|
29/29 |
95d |
e98266e823a1
fs/ntfs3: prevent uninitialized lcn caused by zero len
|
|
KMSAN: uninit-value in bpf_prog_test_run_skb
bpf
prio:high
|
7 |
syz, C |
|
|
4 |
155d |
236d
|
29/29 |
95d |
12bec2bd4b76
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
|
|
general protection fault in f2fs_in_warm_node_list
prio:high
f2fs
|
2 |
syz, C |
error |
|
11247 |
124d |
187d
|
29/29 |
95d |
2d9c4a4ed4ee
f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()
|
|
KASAN: slab-use-after-free Read in rds_conn_path_drop
rds
prio:high
|
19 |
|
|
|
1 |
172d |
172d
|
29/29 |
95d |
ebf71dd4aff4
net/rds: Restrict use of RDS/IB to the initial network namespace
|
|
INFO: task hung in btrfs_invalidate_folio (3)
prio:high
btrfs
|
1 |
syz, C |
error |
|
9 |
145d |
158d
|
29/29 |
95d |
b48c980b6a7e
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit
|
|
general protection fault in rwsem_mark_wake
mm
prio:high
|
2 |
syz, C |
error |
|
9235 |
157d |
160d
|
29/29 |
95d |
68bcd8b6e0b1
locking/rwsem: Fix logic error in rwsem_del_waiter()
|
|
possible deadlock in ocfs2_extend_dir
ocfs2
prio:high
|
4 |
|
|
|
1 |
176d |
172d
|
29/29 |
95d |
b02da26a992d
ocfs2: fix possible deadlock between unlink and dio_end_io_write
|