|
possible deadlock in xsk_diag_dump (3)
bpf
net
prio:normal
|
4 |
|
|
|
6 |
18d |
25d
|
23/29 |
never |
a8455260b2e9
ipvlan: unregister upper devices outside pnodes_lock
|
|
possible deadlock in ipvlan_uninit
prio:normal
net
|
4 |
syz, C |
error |
|
7401 |
1d02h |
69d
|
20/29 |
never |
a8455260b2e9
ipvlan: unregister upper devices outside pnodes_lock
|
|
INFO: task hung in xfs_buf_item_unpin (2)
prio:normal
xfs
|
1 |
syz, C |
done |
done |
159 |
19d |
764d
|
23/29 |
never |
41a28c865d1d
xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
|
|
WARNING: suspicious RCU usage in xfrm_nlmsg_multicast
prio:normal
net
|
4 |
syz, C |
error |
|
163 |
5d17h |
50d
|
15/29 |
never |
42d100f5232f
xfrm: add missing RCU read lock in xfrm_send_migrate_state()
|
|
divide error in mac80211_hwsim_link_info_changed (3)
prio:normal
wireless
|
2 |
|
|
|
6 |
37d |
144d
|
13/29 |
never |
3f28551d0241
wifi: mac80211: reset state when starting AP fails
|
|
memory leak in ieee80211_mesh_csa_beacon
prio:normal
wireless
|
3 |
syz, C |
|
|
4 |
6d18h |
26d
|
13/29 |
never |
860134b3af77
wifi: mac80211: mesh: reset the CSA state when leaving
|
|
UBSAN: array-index-out-of-bounds in snd_dummy_probe
prio:normal
sound
|
15 |
syz, C |
|
|
14 |
45d |
44d
|
26/29 |
never |
02442d5fe8ee
ALSA: dummy: Check card index validity at probe
|
|
KASAN: use-after-free Read in kvm_setup_guest_pvclock
prio:normal
kvm-x86
|
19 |
syz, C |
|
|
5 |
51d |
82d
|
1/29 |
never |
KVM: pfncache: use a dedicated invalidation sequence for cache refresh
|
|
kernel BUG in sock_sendmsg_nosec
net
prio:normal
|
-1 |
syz, C |
|
|
2 |
19d |
19d
|
23/29 |
never |
73e594c19b4f
af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
|
|
general protection fault in __bch2_err_trace
prio:normal
fs
|
2 |
syz, C |
done |
|
25 |
354d |
410d
|
2/29 |
never |
bcachefs: Delete faulty read_only/nochanges check in fs_open()
|
|
kernel BUG in do_bch2_trans_commit_to_journal_replay
prio:normal
fs
|
-1 |
syz |
|
|
22 |
422d |
426d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
WARNING in super_dev_register
prio:normal
fuse
|
-1 |
syz, C |
|
|
10 |
75d |
78d
|
28/29 |
never |
83887ad02f30
block: reject block device inodes with i_rdev == 0 in lookup_bdev()
|
|
UBSAN: array-index-out-of-bounds in print_bpf_insn (2)
prio:normal
bpf
|
17 |
syz, C |
|
|
5818 |
now |
30d
|
23/29 |
never |
37e5c4f4d285
bpf: Reject invalid LDSX instruction in disassembly
|
|
KASAN: slab-use-after-free Write in config_item_get
prio:normal
fs
|
22 |
syz, C |
error |
|
8 |
31d |
51d
|
1/29 |
never |
configfs: unhash the dentry before dropping the item in rmdir
configfs: unhash the dentry before dropping the item in rmdir
|
|
general protection fault in __ip6_del_rt_siblings
net
prio:normal
|
2 |
|
|
|
1 |
17d |
14d
|
16/29 |
never |
cdca92eddc02
ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
|
|
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
prio:normal
usb
|
17 |
|
|
|
506 |
27d |
347d
|
26/29 |
never |
2eed77fdcb0c
kcov: fix data corruption and race conditions on PREEMPT_RT
|
|
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start
prio:normal
usb
|
17 |
|
|
|
3647 |
26d |
349d
|
26/29 |
never |
2eed77fdcb0c
kcov: fix data corruption and race conditions on PREEMPT_RT
|
|
WARNING in cfg80211_pernet_exit
prio:normal
|
-1 |
C |
error |
|
1 |
23d |
18d
|
23/29 |
never |
debac3a20dec
net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
|
|
KASAN: slab-use-after-free Read in nla_put_napi_id
prio:normal
net
|
19 |
|
|
|
3 |
25d |
33d
|
23/29 |
never |
07e98a4d5e9c
netdevsim: update queue NAPI association on queue reset
|
|
KASAN: slab-use-after-free Read in netdev_nl_queue_fill_one
prio:normal
net
|
19 |
|
|
|
13 |
24d |
42d
|
23/29 |
never |
07e98a4d5e9c
netdevsim: update queue NAPI association on queue reset
|
|
INFO: task hung in nilfs_transaction_begin (3)
prio:normal
nilfs
|
1 |
syz, C |
error |
|
7 |
18d |
65d
|
27/29 |
never |
ce5a5ad1a833
nilfs2: fix infinite loop in nilfs_clean_segments()
|
|
BUG: corrupted list in nilfs_lookup_dirty_data_buffers
prio:normal
nilfs
|
8 |
syz, C |
|
|
3 |
64d |
86d
|
27/29 |
never |
a1735eae5544
nilfs2: reject invalid block index in GC ioctl
|
|
WARNING in nilfs_segctor_abort_construction (3)
prio:normal
nilfs
|
-1 |
|
|
|
3 |
77d |
108d
|
27/29 |
never |
6b38b82be46b
nilfs2: suppress false positive WARN_ONs for sufile after an FS error
|
|
WARNING in blk_revalidate_disk_zones
prio:normal
block
|
-1 |
|
|
|
9 |
17d |
37d
|
26/29 |
never |
4e1f23f9c33c
null_blk: serialize configfs attribute updates with device setup
|
|
KASAN: slab-use-after-free Read in nvmf_free_options
prio:normal
actionable
nvme
|
19 |
|
|
|
4 |
16d |
39d
|
22/29 |
never |
56e6279266f6
nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
|
|
WARNING in __rt_mutex_slowlock_locked (3)
prio:normal
ocfs2
|
-1 |
syz, C |
error |
|
3 |
89d |
91d
|
26/29 |
never |
2fdf181afd43
ocfs2: use inode_lock_nested() for orphan dir locking
|
|
KASAN: slab-out-of-bounds Read in reg_fixed_voltage_probe
prio:normal
kernel
|
17 |
syz, C |
|
|
7 |
28d |
29d
|
2/29 |
never |
regulator: fixed: reject incompatible platform devices
|
|
KASAN: slab-use-after-free Read in ring_buffer_iter_advance
prio:normal
actionable
trace
|
19 |
|
|
|
1 |
51d |
46d
|
28/29 |
never |
bf98d7b0d5a9
ring-buffer: Prevent subbuf order change when resizing is disabled
|
|
divide error in tcp_rcv_space_adjust (4)
prio:normal
net
|
2 |
|
|
|
4 |
23d |
39d
|
6/29 |
never |
tcp: do not let tcp_rmem be set below 4096
|
|
KASAN: use-after-free Read in ring_buffer_peek
prio:normal
|
19 |
C |
|
|
1 |
37d |
33d
|
23/29 |
never |
372f8534244d
tracing: Fix use-after-free in trace_pipe read on sub-buffer order change
|
|
KASAN: slab-use-after-free Read in f_midi2_opts_iface_name_show
prio:normal
usb
|
19 |
|
|
|
12 |
28d |
36d
|
23/29 |
never |
fed0aa7c6eae
usb: gadget: f_midi2: fix use-after-free in string attribute show path
|
|
KMSAN: uninit-value in cfg80211_classify8021d
prio:normal
wireless
|
7 |
syz, C |
|
|
24 |
179d |
333d
|
13/29 |
never |
48b2c5c628b0
wifi: cfg80211: check IP header size in cfg80211_classify8021d()
|
|
INFO: task hung in inet_rtm_newaddr
prio:normal
net
|
1 |
syz, C |
done |
|
222 |
4h03m |
632d
|
13/29 |
never |
f4e72e375807
wifi: cfg80211: reduce RTNL holding in regulatory enforcement
|
|
general protection fault in ieee80211_put_srates_elem
prio:normal
wireless
|
2 |
syz, C |
error |
error |
15 |
152d |
243d
|
13/29 |
never |
ac7472a24bd4
wifi: mac80211: abort chanswitch when leaving a mesh
|
|
WARNING in __ieee80211_start_scan (2)
prio:normal
wireless
|
-1 |
|
|
|
1 |
100d |
96d
|
13/29 |
never |
cd54bf333f56
wifi: mac80211: add HE 6 GHz capability in the scan elems len
|
|
WARNING in mac80211_hwsim_tx (2)
prio:normal
wireless
|
-1 |
syz, C |
error |
|
34 |
17d |
131d
|
13/29 |
never |
e14bf37bb2b3
wifi: mac80211: don't allow injecting frames wider than the chanctx
|
|
WARNING in nf_flow_offload_ip_hook
prio:normal
netfilter
|
-1 |
syz, C |
done |
|
9 |
46d |
46d
|
29/29 |
5d04h |
8aecf0bbcc72
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
|
|
KASAN: slab-out-of-bounds Read in ieee80211_ie_split_ric (3)
prio:normal
wireless
|
17 |
syz, C |
|
|
2 |
53d |
71d
|
29/29 |
5d04h |
a2f5286ca4f3
wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
|
|
KASAN: use-after-free Read in ptdump_pte_entry (2)
actionable
prio:normal
mm
|
19 |
|
|
|
1 |
108d |
101d
|
29/29 |
5d04h |
26444eb71465
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
|
|
memory leak in vlan_vid_add
prio:normal
net
|
3 |
syz, C |
|
|
1 |
60d |
74d
|
29/29 |
32d |
dcf15eaf5641
net: hsr: fix memory leak on slave unregistration by removing synced VLANs
|
|
divide error in mac80211_hwsim_write_tsf
prio:normal
wireless
|
2 |
|
|
|
1 |
92d |
89d
|
29/29 |
41d |
23b493d9dc5f
wifi: mac80211_hwsim: avoid treating MCS as legacy rate index
|
|
KASAN: slab-use-after-free Read in debugfs_u32_get (2)
prio:normal
fs
|
19 |
syz |
|
|
1 |
83d |
93d
|
29/29 |
52d |
2e996ca81f95
netdevsim: remove ethtool debugfs files before freeing netdev
|
|
BUG: sleeping function called from invalid context in netif_rx_mode_run
prio:normal
net
|
5 |
|
|
|
1 |
116d |
112d
|
29/29 |
60d |
5eec4427b89c
bridge: Fix sleep in atomic context in netlink path
|
|
KASAN: slab-use-after-free Read in bnep_add_connection
actionable
prio:normal
bluetooth
|
19 |
|
|
|
1 |
123d |
116d
|
29/29 |
65d |
59e932ded949
Bluetooth: bnep: Fix UAF read of dev->name
|
|
WARNING: refcount bug in nsim_fib_event_nb (3)
prio:normal
net
|
13 |
|
|
|
10 |
95d |
101d
|
29/29 |
66d |
06b693d2eb66
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
|
|
general protection fault in can_rx_unregister (2)
prio:normal
can
|
8 |
syz, C |
|
|
3 |
118d |
118d
|
29/29 |
66d |
8ba68464e478
bonding: refuse to enslave CAN devices
|
|
KCSAN: data-race in hash_ip4_add / hash_ip4_head
prio:normal
netfilter
|
6 |
|
|
|
1 |
178d |
178d
|
29/29 |
66d |
2358f7427ccd
netfilter: ipset: Fix data race between add and dump in all hash types
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (4)
prio:normal
media
|
21 |
|
|
|
255 |
66d |
432d
|
29/29 |
66d |
c2d1a2130c93
media: vivid: check for vb2_is_busy() when toggling caps
|
|
general protection fault in kernel_sock_shutdown (4)
rdma
prio:normal
|
19 |
syz, C |
|
|
105 |
107d |
148d
|
29/29 |
66d |
0b28000b64f4
RDMA/nldev: Add mutual exclusion in nldev_dellink()
|
|
general protection fault in skb_segment (5)
prio:normal
net
|
2 |
|
|
|
34 |
95d |
98d
|
29/29 |
66d |
2bf43d0e2e6a
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
|
|
BUG: using smp_processor_id() in preemptible code in cpu_mt
prio:normal
netfilter
|
4 |
|
|
|
4 |
97d |
123d
|
29/29 |
66d |
c376f07e16c0
netfilter: xt_cpu: prefer raw_smp_processor_id
|
|
KASAN: slab-use-after-free Read in sk_msg_recvmsg
prio:normal
bpf
net
|
19 |
syz, C |
error |
error |
3 |
221d |
215d
|
29/29 |
66d |
c010995b29c8
sockmap: Fix use-after-free in udp_bpf_recvmsg()
|
|
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap
prio:normal
wireless
|
-1 |
syz, C |
error |
|
67 |
106d |
111d
|
29/29 |
66d |
6c0cf89f36ac
wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
|
|
KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2)
prio:normal
sound
|
19 |
|
|
|
1 |
125d |
120d
|
29/29 |
66d |
4cc54bdd54b3
ALSA: pcm: oss: Fix setup list UAF on proc write error
|
|
general protection fault in h4_recv
prio:normal
bluetooth
|
2 |
syz, C |
error |
|
4 |
167d |
163d
|
29/29 |
87d |
902fe40bce70
Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
|
|
memory leak in xfrm_policy_construct
prio:normal
net
|
3 |
syz, C |
|
|
8 |
163d |
163d
|
29/29 |
112d |
xfrm: fix refcount leak in xfrm_migrate_policy_find
|
|
BUG: MAX_LOCK_DEPTH too low! (6)
net
prio:normal
|
-1 |
|
|
|
1 |
189d |
189d
|
29/29 |
121d |
b7405dcf7385
bonding: prevent potential infinite loop in bond_header_parse()
|
|
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4)
bpf
net
prio:normal
|
19 |
|
|
|
1 |
173d |
171d
|
29/29 |
121d |
ad8391d37f33
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
|
|
general protection fault in nilfs_mdt_save_to_shadow_map
nilfs
prio:normal
|
2 |
syz, C |
error |
|
87 |
158d |
186d
|
29/29 |
121d |
4a4e0328edd9
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|