|
KCSAN: data-race in rxrpc_peer_keepalive_worker / rxrpc_send_data_packet
afs
net
|
6 |
|
|
|
1 |
337d |
296d
|
29/29 |
177d |
5d5fe8bcd331
rxrpc: Fix data-race warning and potential load/store tearing
|
|
general protection fault in afs_request_key
afs
|
2 |
|
|
|
14 |
336d |
342d
|
29/29 |
296d |
d27c71257825
afs: Fix delayed allocation of a cell's anonymous key
19eef1d98eed
afs: Fix uninit var in afs_alloc_anon_key()
|
|
KASAN: slab-out-of-bounds Read in afs_proc_addr_prefs_write
afs
|
17 |
syz, C |
|
|
659 |
462d |
681d
|
29/29 |
421d |
9aa64182952d
afs: Fix check for NULL terminator
|
|
BUG: unable to handle kernel paging request in afs_put_vlserverlist
afs
|
8 |
syz, C |
|
|
3 |
476d |
565d
|
29/29 |
421d |
8b3c655fa240
afs: Set vllist to NULL if addr parsing fails
|
|
BUG: sleeping function called from invalid context in __do_fault
afs
|
5 |
|
|
|
1 |
583d |
579d
|
28/29 |
507d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
BUG: sleeping function called from invalid context in ovl_cache_entry_new
ntfs3
afs
|
5 |
syz, C |
done |
|
52 |
550d |
582d
|
28/29 |
507d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
general protection fault in afs_atcell_get_link
afs
|
2 |
syz, C |
|
|
25 |
588d |
591d
|
28/29 |
507d |
0307d16f3610
afs: Fix afs_atcell_get_link() to check if ws_cell is unset first
|
|
KASAN: slab-use-after-free Read in afs_dynroot_readdir
afs
|
19 |
syz, C |
|
|
2 |
565d |
579d
|
28/29 |
507d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
BUG: sleeping function called from invalid context in __alloc_frozen_pages_noprof
afs
|
5 |
syz, C |
done |
|
61 |
564d |
582d
|
28/29 |
507d |
a64e4d48a0b7
afs: Fix afs_dynroot_readdir() to not use the RCU read lock
|
|
WARNING: lock held when returning to user space in afs_proc_addr_prefs_write
afs
|
4 |
syz, C |
|
|
5 |
665d |
673d
|
28/29 |
542d |
17a4fde81d3a
afs: Fix merge preference rule failure condition
|
|
WARNING in rxrpc_send_data
net
afs
|
-1 |
syz, C |
done |
|
275 |
682d |
689d
|
28/29 |
542d |
ae4f89989479
rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted
|
|
WARNING in __proc_create (3)
afs
|
-1 |
syz, C |
|
|
2 |
669d |
665d
|
28/29 |
542d |
8fd56ad6e7c9
afs: Fix the maximum cell name length
|
|
KASAN: slab-use-after-free Read in afs_dynroot_test_super
afs
|
19 |
syz, C |
done |
|
4 |
1157d |
1154d
|
23/29 |
1114d |
dc3216b14160
super: ensure valid info
|
|
general protection fault in skb_queue_tail (3)
afs
|
19 |
syz, C |
inconclusive |
done |
9 |
1245d |
1479d
|
23/29 |
1127d |
061b0cb9327b
wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
|
|
KCSAN: data-race in rxrpc_send_data / rxrpc_set_call_completion
afs
net
|
6 |
|
|
|
2 |
1305d |
1285d
|
22/29 |
1240d |
2b5fdc0f5caa
rxrpc: Fix potential data race in rxrpc_wait_to_be_connected()
|
|
kernel BUG in rxrpc_put_call
net
afs
|
-1 |
syz, C |
done |
|
9 |
1377d |
1389d
|
22/29 |
1240d |
01644a1f98ff
rxrpc: Fix wrong error return in rxrpc_connect_call()
|
|
kernel BUG in rxrpc_put_peer
net
afs
|
-1 |
syz, C |
|
|
80 |
1380d |
1424d
|
22/29 |
1240d |
9d35d880e0e4
rxrpc: Move client call connection to the I/O thread
03fc55adf876
rxrpc: Only disconnect calls in the I/O thread
|
|
KASAN: use-after-free Read in rxrpc_lookup_local
net
afs
|
22 |
syz, C |
|
|
3997 |
1394d |
1424d
|
22/29 |
1344d |
8fbcc83334a7
rxrpc: Fix I/O thread startup getting skipped
eaa02390adb0
rxrpc: Fix NULL deref in rxrpc_unuse_local()
|
|
WARNING: bad unlock balance in rxrpc_do_sendmsg
net
afs
|
4 |
syz, C |
inconclusive |
|
14 |
1549d |
1754d
|
22/29 |
1344d |
b0f571ecd794
rxrpc: Fix locking in rxrpc's sendmsg
|
|
KASAN: use-after-free Read in rxrpc_get_skb
afs
net
|
19 |
|
|
|
1 |
2108d |
2104d
|
19/29 |
2060d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
memory leak in rxrpc_lookup_local
afs
net
|
3 |
syz, C |
|
|
1415 |
2100d |
2564d
|
19/29 |
2060d |
b8323f7288ab
rxrpc: Fix memory leak in rxrpc_lookup_local
|
|
KASAN: use-after-free Read in rxrpc_send_data_packet
net
afs
|
19 |
|
|
|
1 |
2102d |
2097d
|
19/29 |
2060d |
7b5eab57cac4
rxrpc: Fix clearance of Tx/Rx ring when releasing a call
|
|
INFO: rcu detected stall in __se_sys_mount
afs
|
1 |
syz, C |
done |
done |
2 |
2183d |
2307d
|
15/29 |
2152d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: use-after-free Read in __proc_create
afs
|
19 |
|
|
|
1 |
2225d |
2223d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: use-after-free Write in afs_manage_cell
afs
|
22 |
syz, C |
done |
done |
20 |
2206d |
2275d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
WARNING in rxrpc_recvmsg
afs
net
|
-1 |
syz, C |
error |
done |
5 |
2309d |
2309d
|
15/29 |
2174d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
INFO: rcu detected stall in sys_mount (5)
afs
|
1 |
syz, C |
done |
done |
10 |
2220d |
2242d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: use-after-free Read in afs_deactivate_cell (2)
afs
|
19 |
syz, C |
done |
|
11 |
2212d |
2230d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
INFO: rcu detected stall in sys_newlstat
afs
|
1 |
syz, C |
error |
done |
1 |
2228d |
2227d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
kernel BUG at net/rxrpc/conn_object.c:LINE!
afs
net
|
-1 |
syz, C |
done |
|
855 |
2176d |
2241d
|
15/29 |
2174d |
546a42410bf7
rxrpc: Fix conn bundle leak in net-namespace exit
|
|
KASAN: use-after-free Read in afs_manage_cell
afs
|
19 |
|
|
|
5 |
2215d |
2230d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in strncasecmp
afs
|
2 |
syz, C |
done |
|
1 |
2228d |
2227d
|
15/29 |
2174d |
92e3cc91d8f5
afs: Fix rapid cell addition/removal by not using RCU on cells tree
|
|
KASAN: use-after-free Write in afs_deactivate_cell
afs
|
22 |
|
|
|
4 |
2207d |
2227d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
WARNING: proc registration bug in afs_manage_cell
afs
|
-1 |
syz, C |
done |
|
1 |
2227d |
2223d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
KASAN: use-after-free Write in rxrpc_put_bundle
afs
net
|
22 |
syz, C |
done |
|
229 |
2212d |
2235d
|
15/29 |
2174d |
f3af4ad1e08a
rxrpc: Fix bundle counting for exclusive connections
|
|
INFO: rcu detected stall in security_file_open (3)
afs
|
1 |
syz, C |
done |
done |
2 |
2222d |
2221d
|
15/29 |
2174d |
1d0e850a49a5
afs: Fix cell removal
|
|
general protection fault in afs_dynroot_depopulate
afs
|
2 |
|
|
|
1 |
2262d |
2261d
|
15/29 |
2234d |
5e0b17b026eb
afs: Fix NULL deref in afs_dynroot_depopulate()
|
|
kernel BUG at net/rxrpc/recvmsg.c:LINE!
afs
net
|
-1 |
syz, C |
error |
|
10 |
2281d |
2309d
|
15/29 |
2234d |
65550098c1c4
rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
|
|
net-next test error: KASAN: use-after-free Write in afs_wake_up_async_call
afs
|
-1 |
|
|
|
60 |
2317d |
2326d
|
15/29 |
2295d |
0041cd5a5044
rxrpc: Fix notification call on completion of discarded calls
|
|
linux-next test error: KASAN: use-after-free Write in afs_wake_up_async_call
afs
|
-1 |
|
|
|
111 |
2322d |
2330d
|
15/29 |
2295d |
0041cd5a5044
rxrpc: Fix notification call on completion of discarded calls
|
|
WARNING in __proc_create (2)
afs
|
-1 |
syz, C |
done |
|
4 |
2473d |
2473d
|
15/29 |
2446d |
a45ea48e2bcd
afs: Fix characters allowed into cell names
|
|
inconsistent lock state in rxrpc_put_client_connection_id
afs
net
|
4 |
syz, C |
done |
|
473 |
2454d |
2460d
|
15/29 |
2446d |
963485d436cc
rxrpc: Fix call RCU cleanup using non-bh-safe locks
|
|
KMSAN: use-after-free in rxrpc_put_peer
net
afs
|
18 |
|
|
|
1 |
2570d |
2570d
|
13/29 |
2529d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
KASAN: use-after-free Read in rxrpc_release_call
afs
net
|
19 |
syz |
done |
|
13 |
2569d |
2625d
|
13/29 |
2552d |
91fcfbe8852e
rxrpc: Fix call crypto state cleanup
|
|
KASAN: use-after-free Read in rxrpc_send_keepalive
afs
net
|
19 |
syz, C |
error |
|
694 |
2566d |
2639d
|
13/29 |
2552d |
c48fc11b69e9
rxrpc: Fix call ref leak
|
|
KASAN: use-after-free Read in rxrpc_put_peer
net
afs
|
19 |
syz, C |
error |
|
38 |
2567d |
2619d
|
13/29 |
2552d |
55f6c98e3674
rxrpc: Fix trace-after-put looking at the put peer record
9ebeddef58c4
rxrpc: rxrpc_peer needs to hold a ref on the rxrpc_local record
|
|
general protection fault in rxrpc_error_report
afs
net
|
2 |
syz, C |
done |
|
6 |
2567d |
2579d
|
13/29 |
2552d |
f0308fb07080
rxrpc: Fix possible NULL pointer access in ICMP handling
|
|
KASAN: use-after-free Read in rxrpc_queue_local
afs
net
|
19 |
syz, C |
done |
|
1 |
2636d |
2636d
|
12/29 |
2610d |
06d9532fa6b3
rxrpc: Fix read-after-free in rxrpc_queue_local()
|
|
kernel BUG at net/rxrpc/local_object.c:LINE!
net
afs
|
-1 |
syz, C |
done |
|
11167 |
2614d |
2681d
|
12/29 |
2610d |
730c5fd42c1e
rxrpc: Fix local endpoint refcounting
|
|
BUG: corrupted list in rxrpc_local_processor
net
afs
|
8 |
syz, C |
done |
|
1679 |
2631d |
2639d
|
12/29 |
2610d |
b00df840fb40
rxrpc: Fix local endpoint replacement
|
|
general protection fault in rxrpc_connect_call
net
afs
|
2 |
syz, C |
done |
|
15 |
2691d |
2837d
|
12/29 |
2643d |
e835ada07091
rxrpc: Fix send on a connected, but unbound socket
|
|
WARNING: bad unlock balance in rxrpc_recvmsg
net
afs
|
4 |
syz, C |
|
|
9 |
2821d |
2825d
|
11/29 |
2795d |
6dce3c20ac42
rxrpc: bad unlock balance in rxrpc_recvmsg
|