|
KASAN: slab-use-after-free Read in bnep_add_connection
actionable
prio:normal
bluetooth
|
19 |
|
|
|
1 |
56d |
49d
|
28/29 |
never |
59e932ded949
Bluetooth: bnep: Fix UAF read of dev->name
|
|
general protection fault in kernel_sock_shutdown (4)
rdma
prio:normal
|
19 |
C |
|
|
105 |
40d |
82d
|
28/29 |
never |
0b28000b64f4
RDMA/nldev: Add mutual exclusion in nldev_dellink()
|
|
general protection fault in __bch2_err_trace
prio:normal
fs
|
2 |
C |
done |
|
25 |
287d |
343d
|
2/29 |
never |
bcachefs: Delete faulty read_only/nochanges check in fs_open()
|
|
kernel BUG in do_bch2_trans_commit_to_journal_replay
prio:normal
fs
|
-1 |
syz |
|
|
22 |
356d |
359d
|
2/29 |
never |
bcachefs: do_bch2_trans_commit_to_journal_replay handles accounting
|
|
WARNING in super_dev_register
fuse
prio:normal
|
-1 |
C |
|
|
10 |
8d17h |
11d
|
2/29 |
never |
block: reject block device inodes with i_rdev == 0 in lookup_bdev()
|
|
general protection fault in can_rx_unregister (2)
prio:normal
can
|
8 |
C |
|
|
3 |
51d |
51d
|
28/29 |
never |
8ba68464e478
bonding: refuse to enslave CAN devices
|
|
BUG: sleeping function called from invalid context in netif_rx_mode_run
prio:normal
net
|
5 |
|
|
|
1 |
49d |
45d
|
28/29 |
never |
5eec4427b89c
bridge: Fix sleep in atomic context in netlink path
|
|
WARNING: refcount bug in nsim_fib_event_nb (3)
prio:normal
net
|
13 |
|
|
|
10 |
28d |
34d
|
28/29 |
never |
06b693d2eb66
ipv4: fib: Don't dump dying fib_info in fib_leaf_notify().
|
|
KASAN: vmalloc-out-of-bounds Read in kcov_remote_stop
prio:normal
usb
|
17 |
|
|
|
461 |
2d08h |
280d
|
2/29 |
never |
kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
|
|
KASAN: vmalloc-out-of-bounds Read in kcov_remote_start
prio:normal
bluetooth
usb
|
17 |
|
|
|
3265 |
54m |
282d
|
2/29 |
never |
kcov: fix data corruption and race conditions on PREEMPT_RT by moving saved remote state to task_struct
|
|
KASAN: slab-use-after-free Read in snd_pcm_oss_look_for_setup (2)
prio:normal
sound
|
19 |
|
|
|
1 |
58d |
53d
|
28/29 |
never |
4cc54bdd54b3
ALSA: pcm: oss: Fix setup list UAF on proc write error
|
|
KASAN: vmalloc-out-of-bounds Write in tpg_fill_plane_buffer (4)
prio:normal
media
|
21 |
|
|
|
252 |
5h56m |
365d
|
28/29 |
never |
c2d1a2130c93
media: vivid: check for vb2_is_busy() when toggling caps
|
|
KASAN: use-after-free Read in ptdump_pte_entry (2)
actionable
prio:normal
mm
|
19 |
|
|
|
1 |
41d |
34d
|
2/29 |
never |
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
|
|
KASAN: slab-use-after-free Read in debugfs_u32_get (2)
prio:normal
fs
|
19 |
syz |
|
|
1 |
16d |
27d
|
27/29 |
never |
2e996ca81f95
netdevsim: remove ethtool debugfs files before freeing netdev
|
|
KCSAN: data-race in hash_ip4_add / hash_ip4_head
prio:normal
netfilter
|
6 |
|
|
|
1 |
111d |
111d
|
28/29 |
never |
2358f7427ccd
netfilter: ipset: Fix data race between add and dump in all hash types
|
|
BUG: using smp_processor_id() in preemptible code in cpu_mt
prio:normal
netfilter
|
4 |
|
|
|
4 |
30d |
56d
|
28/29 |
never |
c376f07e16c0
netfilter: xt_cpu: prefer raw_smp_processor_id
|
|
WARNING in __rt_mutex_slowlock_locked (3)
ocfs2
prio:normal
|
-1 |
C |
error |
|
3 |
22d |
24d
|
2/29 |
never |
ocfs2: use inode_lock_nested() for orphan dir locking
|
|
KASAN: slab-use-after-free Read in sk_msg_recvmsg
prio:normal
bpf
net
|
19 |
C |
error |
error |
3 |
154d |
148d
|
28/29 |
never |
c010995b29c8
sockmap: Fix use-after-free in udp_bpf_recvmsg()
|
|
general protection fault in skb_segment (5)
prio:normal
net
|
2 |
|
|
|
34 |
29d |
32d
|
28/29 |
never |
2bf43d0e2e6a
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
|
|
UBSAN: shift-out-of-bounds in ieee80211_parse_tx_radiotap
prio:normal
wireless
|
-1 |
C |
error |
|
67 |
39d |
44d
|
28/29 |
never |
6c0cf89f36ac
wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
|
|
divide error in mac80211_hwsim_write_tsf
wireless
prio:normal
|
2 |
|
|
|
1 |
25d |
22d
|
3/29 |
never |
wifi: mac80211_hwsim: avoid treating MCS as legacy rate index
|
|
general protection fault in h4_recv
prio:normal
bluetooth
|
2 |
C |
error |
|
4 |
100d |
96d
|
29/29 |
20d |
902fe40bce70
Bluetooth: hci_uart: Fix NULL deref in recv callbacks when priv is uninitialized
|
|
memory leak in xfrm_policy_construct
prio:normal
net
|
3 |
C |
|
|
8 |
97d |
97d
|
29/29 |
46d |
xfrm: fix refcount leak in xfrm_migrate_policy_find
|
|
BUG: MAX_LOCK_DEPTH too low! (6)
net
prio:normal
|
-1 |
|
|
|
1 |
122d |
122d
|
29/29 |
54d |
b7405dcf7385
bonding: prevent potential infinite loop in bond_header_parse()
|
|
KASAN: slab-use-after-free Read in sk_psock_verdict_data_ready (4)
bpf
net
prio:normal
|
19 |
|
|
|
1 |
106d |
104d
|
29/29 |
54d |
ad8391d37f33
bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().
|
|
general protection fault in nilfs_mdt_save_to_shadow_map
nilfs
prio:normal
|
2 |
C |
error |
|
87 |
91d |
119d
|
29/29 |
54d |
4a4e0328edd9
nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map
|